libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libjpeg-turbo | Sep 28, 2018 | Jun 18, 2018 |
| Debian | — | Upgrade libjpeg-turbo | Feb 20, 2019 | Jun 18, 2018 |
| Suse | — | Upgrade libturbojpeg0-32bitUpgrade libjpeg62-32bitUpgrade libjpegUpgrade libjpeg62-turboUpgrade libjpeg-develUpgrade libjpeg62-develUpgrade libjpeg8-devel-32bitUpgrade libjpeg-x86Upgrade libjpeg-devel-32bitUpgrade libjpeg8-32bitUpgrade libturbojpeg0Upgrade libjpeg8-develUpgrade libjpeg-32bitUpgrade libjpeg-turboUpgrade libjpeg62-devel-32bitUpgrade libjpeg62Upgrade jpegUpgrade libjpeg8 | Jun 29, 2018 | Jun 18, 2018 |
| Ubuntu | — | Upgrade libjpeg-turbo8 | Jul 12, 2018 | Jun 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub