Summary
It was discovered that libjpeg-turbo incorrectly handled certain malformed
JPEG images. If a user or automated system were tricked into opening a
specially crafted JPEG image, a remote attacker could cause libjpeg-turbo
to crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libjpeg-turbo | 1.3.0-0ubuntu2.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | libjpeg-turbo | 1.4.2-0ubuntu3.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.1 |
Vulnerabilities 7
-
Unscored —
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, relate…
-
Unscored —
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and applica…
-
Unscored —
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
-
Unscored —
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a…
-
Unscored —
An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a den…
-
Unscored —
An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a deni…
-
Unscored —
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cr…
References
-
report
https://ubuntu.com/security/CVE-2014-9092
-
report
https://ubuntu.com/security/CVE-2016-3616
-
report
https://ubuntu.com/security/CVE-2017-15232
-
report
https://ubuntu.com/security/CVE-2018-1152
-
report
https://ubuntu.com/security/CVE-2018-11212
-
report
https://ubuntu.com/security/CVE-2018-11213
-
report
https://ubuntu.com/security/CVE-2018-11214