The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted JPEG file that exceeds the intended memory limits.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade sys-auth/pam_krb5.Upgrade www-client/uzbl.Upgrade net-mail/mlmmj.Upgrade x11-libs/gtk+.Upgrade media-gfx/splashutils.Upgrade dev-perl/perl-tk.Upgrade dev-util/sourcenav.Upgrade sys-apps/acl.Upgrade net-ftp/lftp.Upgrade dev-lang/tk.Upgrade dev-util/insight.Upgrade app-misc/beanstalkd.Upgrade app-text/dvipng.Upgrade app-arch/ncompress.Upgrade media-libs/jpeg.Upgrade sys-devel/m4.Upgrade media-tv/dvbstreamer.Upgrade kde-base/kget.Upgrade dev-libs/liblzw.Upgrade sys-block/partimage.Upgrade x11-misc/slim.Upgrade x11-apps/xinit.Upgrade app-antivirus/bitdefender-console.Upgrade app-arch/gzip.Upgrade kde-base/kdm.Upgrade net-misc/iputils.Upgrade sys-apps/pmount.Upgrade app-text/gv. | Oct 30, 2017 | Jun 13, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub