Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-37836HistoryJul 13, 2023 - 11:15 p.m.
CVE-2023-37836
2023-07-1323:15:11
Debian Security Bug Tracker
security-tracker.debian.org
8
libjpeg
vulnerability
denial of service
crafted file
unix
cve-2023-37836
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
21.3%
libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libjpeg | <= 0.0~git20220805.54ec643-1 | libjpeg_0.0~git20220805.54ec643-1_all.deb |
| Debian | 11 | all | libjpeg | <= 0.0~git20210129.91985dc-1 | libjpeg_0.0~git20210129.91985dc-1_all.deb |
| Debian | 999 | all | libjpeg | <= 0.0~git20220805.54ec643-1 | libjpeg_0.0~git20220805.54ec643-1_all.deb |
| Debian | 13 | all | libjpeg | <= 0.0~git20220805.54ec643-1 | libjpeg_0.0~git20220805.54ec643-1_all.deb |
Related
prion
prion
Authentication flaw
2023-07-13 23:15:00
ubuntucve
ubuntucve
CVE-2023-37836
2023-07-13 00:00:00
cvelist
cvelist
CVE-2023-37836
2023-07-13 00:00:00
veracode
veracode
Reachable Assertion
2023-08-04 06:11:13
Denial Of Service (DoS)
2023-07-20 09:12:19
cve
cve
CVE-2023-37836
2023-07-13 23:15:11
nvd
nvd
CVE-2023-37836
2023-07-13 23:15:11
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
21.3%
Related for DEBIANCVE:CVE-2023-37836