libjpeg-turbo: Crash in libjpeg_turbo_fuzzer

Project: https://github.com/libjpeg-turbo/libjpeg-turbo.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5850953135685632 Target: libjpeg-turbo Fuzzer: libFuzzerlibjpeg-turbolibjpegturbofuzzer Fuzzer binary: libjpegturbofuzzer Job Type: libfuzzerasanlibjpeg-turbo Platfor...

libjpeg-turbo Remote Code Execution Vulnerability

libjpeg is a C library maintained by the Independent JPEG Group IJG that contains JPEG decoding, JPEG encoding, and other JPEG functions. libjpeg-turbo is a modified version of libjpeg optimized for x86 and x86-64 processors. A remote code execution vulnerability exists in libjpeg-turbo. An...

MGASA-2016-0224 Updated libjpeg packages fix security vulnerability

Updated libjpeg packages fix security vulnerability: Out-of-Bounds Read in libjpeg-turbo before 1.5.0 via unusually long Blocks in MCU LJT-01-005...

Updated libjpeg packages fix security vulnerability

Updated libjpeg packages fix security vulnerability: Out-of-Bounds Read in libjpeg-turbo before 1.5.0 via unusually long Blocks in MCU LJT-01-005...

GLSA-201606-03 : libjpeg-turbo: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-03 libjpeg-turbo: Multiple vulnerabilities libjpeg-turbo does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers. Impact : Remote attackers could...

libjpeg-turbo: Multiple vulnerabilities

Background libjpeg-turbo is a MMX, SSE, and SSE2 SIMD accelerated JPEG library Description libjpeg-turbo does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers. Impact Remote attackers could obtain sensitive information...

F5 Networks BIG-IP : libjpeg vulnerability (K59503294)

The getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers,...

F5 Networks BIG-IP : libjpeg-turbo vulnerability (K62655427)

The getdht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table DHT JPEG markers, which allows remote...

openSUSE Security Update : Chromium (openSUSE-2016-238)

This update to Chromium 48.0.2564.109 fixes the following issues : Security fixes boo965999 : - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-162...

SOL59503294 - libjpeg vulnerability CVE-2013-6629

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

openSUSE Security Update : Chromium (openSUSE-2016-221)

This update to Chromium 48.0.2564.109 fixes the following issues : Security fixes boo965999 : - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-162...

SOL62655427 - libjpeg-turbo vulnerability CVE-2013-6630

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

openSUSE Security Update : Mozilla Thunderbird (openSUSE-2015-885)

The MozillaThunderbird package was updated to version 38.4.0 to fix several security and non security issues : Changes in MozillaThunderbird : - update to Thunderbird 38.4.0 bnc952810 - MFSA 2015-116/CVE-2015-4513/CVE-2015-4514 Miscellaneous memory safety hazards - MFSA 2015-122/CVE-2015-7188...

Oracle: Security Advisory (ELSA-2013-1803)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-267)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2015-540)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : libjpeg-turbo (ALAS-2015-540)

A flaw in libjpeg-turbo was reported that could lead to a local denial of service when processing a specially crafted JPEG issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2015-540...

Low: libjpeg-turbo

Issue Overview: A flaw in libjpeg-turbo was reported http://seclists.org/oss-sec/2014/q4/557 that could lead to a local denial of service when processing a specially-crafted JPEG issue. Affected Packages: libjpeg-turbo Issue Correction: Run yum update libjpeg-turbo or yum update --advisory...

SUSE SLED12 / SLES12 Security Update : libjpeg-turbo, libjpeg62-turbo (SUSE-SU-2015:0029-1)

libjpeg-turbo, libjpeg62-turbo were updated to fix one security issue. This security issue was fixed : - Passing special crafted jpeg file smashes stack CVE-2014-9092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality of protected information

The libjpeg-turbo-debuginfo-1.2.1 package on the CentOS operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...