CVE-2018-11213: Undefined Security Weakness

An issue was discovered in libjpeg 9a. The gettextgrayrow function in rdppm.c allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

PT-2018-10403

Name of the Vulnerable Software and Affected Versions libjpeg version 9a Description An issue in the get text rgb row function in rdppm.c allows remote attackers to cause a denial of service, resulting in a Segmentation fault, via a crafted file. Recommendations For libjpeg version 9a, at the...

PT-2018-10402

Name of the Vulnerable Software and Affected Versions libjpeg version 9a Description An issue in the get text gray row function in rdppm.c allows remote attackers to cause a denial of service, resulting in a Segmentation fault, via a crafted file. Recommendations For libjpeg version 9a, at the...

UBUNTU-CVE-2018-11212

An issue was discovered in libjpeg 9a and 9d. The allocsarray function in jmemmgr.c allows remote attackers to cause a denial of service divide-by-zero error via a crafted file...

CVE-2018-11212: Divide By Zero

An issue was discovered in libjpeg 9a and 9d. The allocsarray function in jmemmgr.c allows remote attackers to cause a denial of service divide-by-zero error via a crafted file...

UBUNTU-CVE-2018-11214

An issue was discovered in libjpeg 9a. The gettextrgbrow function in rdppm.c allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

CVE-2018-11212

An issue was discovered in libjpeg 9a and 9d. The allocsarray function in jmemmgr.c allows remote attackers to cause a denial of service divide-by-zero error via a crafted file...

CVE-2018-11213

An issue was discovered in libjpeg 9a. The gettextgrayrow function in rdppm.c allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

DEBIAN-CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

CVE-2018-10126: NULL Pointer Dereference

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

PT-2018-14714

Name of the Vulnerable Software and Affected Versions IBM SDK, Java Technology Edition version 8 on the AIX platform libjpeg affected versions not specified Description The issue concerns a potential code injection and privilege elevation by local users due to the use of absolute RPATHs in IBM SD...

PT-2018-2610

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.12.0 libjpeg affected versions not specified Description The issue is related to buffer overflow in the jio snprintf and jio vsnprintf functions of Eclipse OpenJ9, which can be exploited by a remote attacker ...

PT-2018-2416

Name of the Vulnerable Software and Affected Versions libjpeg versions 9a through 9d Description The issue allows remote attackers to cause a denial of service via a crafted file, resulting in a divide-by-zero error in the alloc sarray function in jmemmgr.c. This can lead to the application...

PT-2018-2609

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 version 0.11.0 libjpeg affected versions not specified Description The issue is related to insufficient input validation in the OpenJ9 JIT compiler component of the Eclipse OpenJ9 virtual machine. This can be exploited by a remo...

The vulnerability of the jdpostct and jquant1 components of the libjpeg-turbo image processing library allows a hacker to induce a service failure.

The vulnerability of the components jdpostct jdpostct.c and jquant1 jquant1.c of the image processing library libjpeg-turbo is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by using a specially crafte...

MGASA-2018-0145 Updated qpdf packages fix security vulnerabilities

Updated qpdf packages fix security vulnerabilities: 1. Stack overflow due to endless recursion in QPDFTokenizer::resolveLiteral 2. Another stack overflow / endless recursion in QPDFWriter::enqueueObject 3. Stack out of bounds read in iteraterc4 4. heap out of bounds read large in PlBuffer::write ...