libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade turbojpeg-develUpgrade libjpeg-turboUpgrade libjpeg-turbo-utilsUpgrade turbojpegUpgrade libjpeg-turbo-devel | May 8, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libjpeg-turbo-develUpgrade turbojpegUpgrade libjpeg-turbo-debuginfoUpgrade libjpeg-turbo-utilsUpgrade turbojpeg-develUpgrade libjpeg-turbo | Sep 21, 2023 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade libjpeg-turboUpgrade turbojpegUpgrade libjpeg-turbo-develUpgrade libjpeg-turbo-utilsUpgrade turbojpeg-devel | May 15, 2024 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade libjpeg-turbo-debugsourceNo solution existsUpgrade libjpeg-turbo-debuginfoUpgrade libjpeg-turbo-utilsUpgrade turbojpeg-debuginfoUpgrade libjpeg-turbo-develUpgrade libjpeg-turboUpgrade turbojpeg-develUpgrade turbojpegUpgrade libjpeg-turbo-utils-debuginfo | May 1, 2024 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade libjpeg-turboUpgrade libjpeg-turbo-utilsUpgrade libjpeg-turbo-develUpgrade libjpeg-turbo-debugsourceUpgrade libjpeg-turbo-utils-debuginfoUpgrade turbojpegUpgrade libjpeg-turbo-debuginfoUpgrade turbojpeg-debuginfoUpgrade turbojpeg-devel | May 13, 2024 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub