Description
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libjpeg-turbo | 1.3.0-3 | — |
| Debian 13 | libjpeg-turbo | 1.3.0-3 | — |
| Debian 12 | libjpeg-turbo | 1.3.0-3 | — |
| Debian 7 | chromium-browser | 31.0.1650.57-1~deb7u1 | DSA-2799-1 |
| Debian 7 | openjdk-7 | 7u55-2.4.7-1~deb7u1 | DSA-2923-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.1.0-1jpp.2.el7_0 | RHSA-2014:0705 |
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.16.6-1jpp.1.el6_5 | RHSA-2014:0509 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.0-1jpp.1.el6_5 | RHSA-2014:0508 |
| RHEL 6 | java-1.7.0-ibm +5 | 1:1.7.0.7.0-1jpp.1.el6_5 | RHSA-2014:0486 |
| RHEL 6 | java-1.7.0-oracle +5 | 1:1.7.0.55-1jpp.1.el6_5 | RHSA-2014:0412 |
| RHEL 6 | libjpeg-turbo +2 | 1.2.1-3.el6_5 | RHSA-2013:1803 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.16.6-1jpp.1.el5_10 | RHSA-2014:0509 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.0-1jpp.1.el5_10 | RHSA-2014:0508 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.7.0-1jpp.1.el5_10 | RHSA-2014:0486 |
| RHEL 5 | java-1.7.0-oracle +5 | 1:1.7.0.55-1jpp.2.el5_10 | RHSA-2014:0412 |
| RHEL 5 | libjpeg +1 | 6b-38 | RHSA-2013:1804 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Oracle Java 6 | java-1.6.0-sun +5 | 1:1.6.0.75-1jpp.1.el6_5 | RHSA-2014:0414 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.7.0-oracle +5 | 1:1.7.0.55-1jpp.1.el6_5 | RHSA-2014:0413 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.6.0-sun +5 | 1:1.6.0.75-1jpp.3.el5_10 | RHSA-2014:0414 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.7.0-oracle +5 | 1:1.7.0.55-1jpp.2.el5_10 | RHSA-2014:0413 |
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.16.0-1jpp.1.el5 | RHSA-2014:0982 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 | openSUSE-SU-2024:10230-1 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 | openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10171-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
Advisories 18
- RHSA-2014:0982 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0705 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0509 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0508 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0486 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0414 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0413 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:0412 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:1803 Red Hat Security Advisory: libjpeg-turbo security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2013:1804 Red Hat Security Advisory: libjpeg security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2799-1 chromium-browser - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2923-1 openjdk-7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10171-1 chromedriver-55.0.2883.75-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10230-1 MozillaThunderbird-45.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12948-1 ungoogled-chromium-113.0.5672.92-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- 20131112 bugs in IJG jpeg6b & libjpeg-turbo mailing-list
- 63676 vdb-entry
- https://www.ibm.com/support/docview.wss?uid=swg21675973
- RHSA-2014:0414 vendor-advisory
- GLSA-201406-32 vendor-advisory
- RHSA-2013:1804 vendor-advisory
- openSUSE-SU-2013:1958 vendor-advisory
- HPSBUX03091 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080
- RHSA-2014:0413 vendor-advisory
- 59058 third-party-advisory
- RHSA-2013:1803 vendor-advisory
- openSUSE-SU-2013:1957 vendor-advisory
- HPSBUX03092 vendor-advisory
- http://support.apple.com/kb/HT6163
- 56175 third-party-advisory
- FEDORA-2013-23127 vendor-advisory
- openSUSE-SU-2014:0065 vendor-advisory
- FEDORA-2013-23519 vendor-advisory
- 58974 third-party-advisory
- 1029470 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=891693
- openSUSE-SU-2013:1917 vendor-advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-116.html
- http://support.apple.com/kb/HT6150
- openSUSE-SU-2013:1959 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2013-6629
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- openSUSE-SU-2013:1916 vendor-advisory
- openSUSE-SU-2014:0008 vendor-advisory
- http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
- 1029476 vdb-entry
- openSUSE-SU-2013:1776 vendor-advisory
- https://src.chromium.org/viewvc/chrome?revision=229729&view=revision
- GLSA-201606-03 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21676746
- openSUSE-SU-2013:1918 vendor-advisory
- FEDORA-2013-23291 vendor-advisory
- http://support.apple.com/kb/HT6162
- https://code.google.com/p/chromium/issues/detail?id=258723
- USN-2052-1 vendor-advisory
- DSA-2799 vendor-advisory
- openSUSE-SU-2013:1861 vendor-advisory
- openSUSE-SU-2013:1777 vendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://advisories.mageia.org/MGASA-2013-0333.html
- http://bugs.ghostscript.com/show_bug.cgi?id=686980
- MDVSA-2013:273 vendor-advisory
- USN-2060-1 vendor-advisory
- USN-2053-1 vendor-advisory
- FEDORA-2013-23295 vendor-advisory