Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2022-0353
HistoryOct 01, 2022 - 8:48 p.m.

Updated libjpeg packages fix security vulnerability

2022-10-0120:48:24
Gentoo Foundation
advisories.mageia.org
23
libjpeg
security vulnerability
heap-based buffer overflow
ppm reader
cve-2021-46822
unix

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

22.9%

JSON

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c. (CVE-2021-46822)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchlibjpeg< 2.0.8-1libjpeg-2.0.8-1.mga8

Related

nessus 21
openvas 15
cbl_mariner 1
rocky 1
nvd 1
cvelist 1
prion 1
debiancve 1
osv 4
ubuntucve 1
cve 1
redhat 1
almalinux 1
oraclelinux 1
redhatcve 1
amazon 1
cloudfoundry 1
ubuntu 1
ibm 1
nessus
nessus
RHEL 9 : libjpeg-turbo (RHSA-2023:1068)
2023-03-06 00:00:00
EulerOS Virtualization 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2023-2200)
2023-06-13 00:00:00
EulerOS Virtualization 2.10.1 : libjpeg-turbo (EulerOS-SA-2022-2893)
2022-12-27 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2023-1733)
2023-05-08 00:00:00
Mageia: Security Advisory (MGASA-2022-0353)
2022-10-03 00:00:00
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2022-2351)
2022-09-26 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-46822 affecting package libjpeg-turbo 2.0.0-7
2022-07-14 20:59:55
rocky
rocky
libjpeg-turbo security update
2023-03-08 16:38:23
nvd
nvd
CVE-2021-46822
2022-06-18 16:15:08
cvelist
cvelist
CVE-2021-46822
2022-06-18 15:27:44
prion
prion
Heap overflow
2022-06-18 16:15:00
debiancve
debiancve
CVE-2021-46822
2022-06-18 16:15:08
osv
osv
Moderate: libjpeg-turbo security update
2023-03-06 00:00:00
CVE-2021-46822
2022-06-18 16:15:08
Moderate: libjpeg-turbo security update
2023-03-08 16:38:23
ubuntucve
ubuntucve
CVE-2021-46822
2022-06-18 00:00:00
cve
cve
CVE-2021-46822
2022-06-18 16:15:08
redhat
redhat
(RHSA-2023:1068) Moderate: libjpeg-turbo security update
2023-03-06 10:50:14
almalinux
almalinux
Moderate: libjpeg-turbo security update
2023-03-06 00:00:00
oraclelinux
oraclelinux
libjpeg-turbo security update
2023-03-06 00:00:00
redhatcve
redhatcve
CVE-2021-46822
2022-06-22 09:36:12
amazon
amazon
Medium: libjpeg-turbo
2023-08-17 11:58:00
cloudfoundry
cloudfoundry
USN-5631-1: libjpeg-turbo vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
ubuntu
ubuntu
libjpeg-turbo vulnerabilities
2022-09-22 00:00:00
ibm
ibm
Security Bulletin: IBM Transform Services for IBM i is vulnerable to denial of service, buffer overflow, and allowing attacker to obtain sensitive information due to multiple vulnerabilities.
2022-11-17 15:02:38

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

22.9%

JSON
Related for MGASA-2022-0353
nessus21openvas15cbl_mariner1rocky1nvd1cvelist1prion1debiancve1osv4ubuntucve1cve1redhat1almalinux1oraclelinux1redhatcve1amazon1cloudfoundry1ubuntu1ibm1