Summary
Aladdin Mubaied discovered that the cjpeg utility in libjpeg9 did not properly
validate the input image's size. An attacker could possibly use this issue to
cause a denial of service or execute arbitrary code. (CVE-2016-3616)
It was discovered that the cjpeg utility in libjpeg9 incorrectly handled
certain input. An attacker could possibly use these issues to cause a denial of
service. (CVE-2018-11212, CVE-2018-11813, CVE-2020-14152, CVE-2020-14153)
It was discovered that the cjpeg utility in libjpeg9 incorrectly handled
memory when supplied with certain input. An attacker could possibly use these
issues to cause a denial of service or execute arbitrary code.
(CVE-2018-11213, CVE-2018-11214)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libjpeg9 | 1:9b-1ubuntu1+esm1 |
Vulnerabilities 7
-
Unscored —
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and applica…
-
Unscored —
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a…
-
Unscored —
An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a den…
-
Unscored —
An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a deni…
-
Unscored —
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
-
Unscored —
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use s…
-
Unscored —
In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointer…
References
-
report
https://ubuntu.com/security/CVE-2016-3616
-
report
https://ubuntu.com/security/CVE-2018-11212
-
report
https://ubuntu.com/security/CVE-2018-11213
-
report
https://ubuntu.com/security/CVE-2018-11214
-
report
https://ubuntu.com/security/CVE-2018-11813
-
report
https://ubuntu.com/security/CVE-2020-14152
-
report
https://ubuntu.com/security/CVE-2020-14153