libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libjpeg-turbo | Sep 28, 2018 | Jun 18, 2018 |
| Debian | — | Upgrade libjpeg-turbo | Feb 20, 2019 | Jun 18, 2018 |
| Suse | — | Upgrade libjpeg-turboUpgrade libjpeg62-devel-32bitUpgrade libjpeg62Upgrade libjpeg8-32bitUpgrade jpegUpgrade libturbojpeg0Upgrade libjpeg8Upgrade libjpeg8-develUpgrade libjpeg-x86Upgrade libjpeg-devel-32bitUpgrade libjpeg-32bitUpgrade libturbojpeg0-32bitUpgrade libjpeg-develUpgrade libjpeg62-develUpgrade libjpeg8-devel-32bitUpgrade libjpeg62-turboUpgrade libjpegUpgrade libjpeg62-32bit | Jun 29, 2018 | Jun 18, 2018 |
| Ubuntu | — | Upgrade libjpeg-turbo8 | Jul 12, 2018 | Jun 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub