1612 matches found
Updated qpdf packages fix security vulnerabilities
Updated qpdf packages fix security vulnerabilities: 1. Stack overflow due to endless recursion in QPDFTokenizer::resolveLiteral 2. Another stack overflow / endless recursion in QPDFWriter::enqueueObject 3. Stack out of bounds read in iteraterc4 4. heap out of bounds read large in...
openSUSE Security Update : libjpeg-turbo (openSUSE-2018-141)
This update for libjpeg-turbo fixes the following security issue : - CVE-2017-15232: Fix NULL pointer dereference in jdpostct.c and jquant1.c - additional fixes bsc1062937 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
SUSE SLED12 / SLES12 Security Update : libjpeg-turbo (SUSE-SU-2018:0373-1)
This update for libjpeg-turbo fixes the following issues: Feature update : - Update from version 1.3.1 to version 1.5.2 fate324061. Security issue fixed : - CVE-2017-15232: Fix NULL pointer dereference in jdpostct.c and jquant1.c bsc1062937. Note that Tenable Network Security has extracted the...
SUSE-SU-2018:0373-1 Security update for libjpeg-turbo
This update for libjpeg-turbo fixes the following issues: Feature update: - Update from version 1.3.1 to version 1.5.2 fate324061. Security issue fixed: - CVE-2017-15232: Fix NULL pointer dereference in jdpostct.c and jquant1.c bsc1062937...
ImageWorsener Denial of Service Vulnerability
ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the 'getrawsampleint' function in the imagew-main.c file of the libimageworsener.a file in ImageWorsener version 1.3.2. When libjpeg 8d is used, an attacker can exploit this vulnerability to cause...
Code injection
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the getrawsampleint function in imagew-main.c...
CVE-2018-5252
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the getrawsampleint function in imagew-main.c...
CVE-2018-5252
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the getrawsampleint function in imagew-main.c...
CVE-2018-5252
CVE-2018-5252 affects ImageWorsener 1.3.2 (libimageworsener.a) when linked with libjpeg 8d. The vulnerability is described as a large loop in get_raw_sample_int in imagew-main.c, leading to denial of service. Multiple sources (CNVD, NVD, Red Hat entry) corroborate the vulnerable component and ver...
PT-2018-16840
Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.2 Description The issue is related to a large loop in the get raw sample int function in imagew-main.c, specifically when libjpeg 8d is used. Recommendations For ImageWorsener version 1.3.2, consider updating libjpeg ...
Critical Photon OS Security Update - PHSA-2017-0007
Updates of 'libjpeg-turbo', 'krb5' packages of Photon OS have been released...
MGASA-2017-0407 Updated libjpeg packages fix a security vulnerability
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. CVE-2017-15232...
Updated libjpeg packages fix a security vulnerability
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. CVE-2017-15232...
openSUSE Security Update : libjpeg-turbo (openSUSE-2017-1218)
This update for libjpeg-turbo to version 1.5.2 fixes the following issues : - CVE-2017-15232: NULL pointer dereference in jdpostct.c and jquant1.c boo1062937 This compatible version update contains the following improvements : - Improved and updated upsampling support and sampling factors - Memor...
Null pointer dereference
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...
DEBIAN-CVE-2017-15232
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...
CVE-2017-15232
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...
CVE-2017-15232
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...