1319 matches found
ALPINE-CVE-2018-14498
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...
DEBIAN-CVE-2018-14498
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...
UBUNTU-CVE-2018-14498
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...
CVE-2018-14498
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...
CVE-2018-14498
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...
Heap overflow
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...
CVE-2018-14498
CVE-2018-14498 affects libjpeg-turbo (and MozJPEG) where get_8bit_row in rdbmp.c is vulnerable to a heap-based buffer over-read when processing a crafted 8-bit BMP, allowing denial of service. The issue exists in libjpeg-turbo up to version 1.5.90 and MozJPEG up to 3.3.1. Affected products: libjp...
libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c
A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this vulnerability to cause a denial of service via a crafted file...
RHEL 6 : java-1.8.0-ibm (RHSA-2019:0469)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0469 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...
libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c
A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this vulnerability to cause a denial of service via a crafted file...
New Relic: Password theft login.newrelic.com via Request Smuggling
Hi, The Rails application at login.newrelic.com is accessed through a proxy written in Golang, and an nginx server. By sending an ambiguous request, an attacker can desynchronize these servers, leaving the socket to the backend poisoned with a harmful response. This response will then be served u...
Important Photon OS Security Update - PHSA-2019-0126
Updates of 'libjpeg-turbo', 'unzip', 'kibana', 'openssh' packages of Photon OS have been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0126
An update of 'openssh', 'kibana', 'libjpeg-turbo', 'unzip' packages of Photon OS has been released...
Fedora 29 : mingw-libjpeg-turbo (2019-a018522ba3)
Security fix for CVE-2018-19664 and CVE-2018-20330. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Debian DLA-1638-1 : libjpeg-turbo security update
Several vulnerabilities have been resolved in libjpeg-turbo, Debian's default JPEG implemenation. CVE-2016-3616 The cjpeg utility in libjpeg allowed remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file. This issu...
[SECURITY] [DLA 1638-1] libjpeg-turbo security update
Package : libjpeg-turbo Version : 1:1.3.1-12+deb8u1 CVE ID : CVE-2016-3616 CVE-2018-1152 CVE-2018-11212 CVE-2018-11213 CVE-2018-11214 Debian Bug : 819969 902950 902176 Several vulnerabilities have been resolved in libjpeg-turbo, Debians default JPEG implemenation. CVE-2016-3616 The cjpeg utility ...
[SECURITY] Fedora 29 Update: mingw-libjpeg-turbo-2.0.0-2.fc29
MinGW Windows cross compiled Libjpeg-turbo library...
Fedora 29 : libjpeg-turbo (2019-ae92ca8981)
Fix for CVE-2018-20330 and CVE-2018-19664 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenabl...
Debian: Security Advisory (DLA-1638-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...