Denial Of Service (DoS)

fiona is vulnerable Denial of Service DoS. The vulnerability is due to the bundled libjpeg-turbo and gdal components which contain Denial of Service vulnerabilities, which could potentially result in an application crash...

Fiona affected by CVE-2020-14152 related to madler-zlib

Summary Vulnerability scan of fiona shows CVE-2020-14152. The vulnerability is in libjpeg, a transitive dependency of fiona via GDAL and PROJ. Details In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive...

GHSA-G4M4-9Q4C-MFW6 Fiona affected by CVE-2020-14152 related to madler-zlib

Summary Vulnerability scan of fiona shows CVE-2020-14152. The vulnerability is in libjpeg, a transitive dependency of fiona via GDAL and PROJ. Details In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive...

SUSE CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

OPENSUSE-SU-2024:10357-1 libjpeg-turbo-1.5.1-40.2 on GA media

These are all security issues fixed in the libjpeg-turbo-1.5.1-40.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13552-1 libjpeg-turbo-3.0.1-77.1 on GA media

These are all security issues fixed in the libjpeg-turbo-3.0.1-77.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10952-1 libjpeg-turbo-2.1.1-65.2 on GA media

These are all security issues fixed in the libjpeg-turbo-2.1.1-65.2 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 Note that Nessus has not tested for this issue but has...

RHEL 4 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libjpeg: cjpeg utility large loop because readpixel in rdtarga.c mishandles EOF CVE-2018-11813 Note that Nessus has...

RHEL 5 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 - An issue was discovered in libjpeg 9a and 9d...

RHEL 6 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 - An issue was discovered in libjpeg 9a and 9d...

RHEL 8 : libjpeg-turbo (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress...

RHEL 6 : libjpeg-turbo (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg-turbo: Invalid memory access in the fillinputbuffer function CVE-2017-9614 - libjpeg-turbo before...

RHEL 7 : libjpeg-turbo (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg-turbo: Invalid memory access in the fillinputbuffer function CVE-2017-9614 - libjpeg-turbo: sever...

Rocky Linux 9 : libjpeg-turbo (RLSA-2024:2295)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2295 advisory. - libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c. CVE-2021-29390 Note that Nessus has not tested fo...

RHEL 7 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 Note that Nessus has not tested for this issue but has...

RHEL 6 : libjpeg-turbo (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress...

RHEL 6 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 - An issue was discovered in libjpeg 9a. The...

RHEL 5 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 - An issue was discovered in libjpeg 9a. The...

RHEL 4 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libjpeg: cjpeg utility large loop because readpixel in rdtarga.c mishandles EOF CVE-2018-11813 Note that Nessus has...