Heap overflow

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

CVE-2018-19664

CVE-2018-19664 affects libjpeg-turbo 2.0.1. The issue is a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg. The connected OSV entry confirms the same root cause. The available documents describe the vulnerability as a read past the buffer, potential...

CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

QNAP QTS Buffer Overflow Vulnerability (CNVD-2019-08338)

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A buffer overflow vulnerability exists in QNAP QTS, which can be exploited by attackers to execute arbitrary code or cause a denial of...

QNAP QTS Command Injection Vulnerability (CNVD-2018-26642)

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A command injection vulnerability exists in QNAP QTS. A remote attacker can exploit this vulnerability to run arbitrary commands on th...

QNAP QTS Cross-Site Scripting Vulnerability (CNVD-2018-24263)

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A cross-site scripting vulnerability exists in QNAP QTS version 4.2.6 build 20180711 and earlier, 4.3.3 build 20180725 and earlier, an...

EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2018-1299)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF.CVE-2018-11813 Note that Tenable Network Security has extracted th...

EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2018-1298)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF.CVE-2018-11813 Note that Tenable Network Security has extracted th...

QNAP QTS Music Station Command Injection Vulnerability

QNAP QTS is a Turbo NAS operating system from QNAP Systems that provides file storage, management, backup, multimedia applications and security monitoring. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. Music Station is one of the audio...

Fedora Update for libjpeg-turbo FEDORA-2018-930dd33e43

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: libjpeg-turbo-1.5.3-6.fc28

The libjpeg-turbo package contains a library of functions for manipulating JPEG images...

USN-3706-2: libjpeg-turbo vulnerabilities

USN-3706-1 fixed a vulnerability in libjpeg-turbo. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that libjpeg-turbo incorrectly handled certain malformed JPEG images. If a user or automated system were tricked into opening a...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libjpeg-turbo vulnerabilities (USN-3706-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3706-1 advisory. It was discovered that libjpeg-turbo incorrectly handled certain malformed JPEG images. If a user or automated system were tricke...

Ubuntu: Security Advisory (USN-3706-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3706-1: libjpeg-turbo vulnerabilities

It was discovered that libjpeg-turbo incorrectly handled certain malformed JPEG images. If a user or automated system were tricked into opening a specially crafted JPEG image, a remote attacker could cause libjpeg-turbo to crash, resulting in a denial of service, or possibly execute arbitrary cod...

USN-3706-1 libjpeg-turbo vulnerabilities

It was discovered that libjpeg-turbo incorrectly handled certain malformed JPEG images. If a user or automated system were tricked into opening a specially crafted JPEG image, a remote attacker could cause libjpeg-turbo to crash, resulting in a denial of service, or possibly execute arbitrary cod...