Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2006-3005
HistoryJun 13, 2006 - 10:02 a.m.

CVE-2006-3005

2006-06-1310:02:00
Debian Security Bug Tracker
security-tracker.debian.org
9

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.005

Percentile

77.2%

The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted JPEG file that exceeds the intended memory limits.

OSVersionArchitecturePackageVersionFilename
Debian999alllibjpeg6b< 1:6b2-3.1libjpeg6b_1:6b2-3.1_all.deb

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.005

Percentile

77.2%