RHEL 6 : libjpeg-turbo (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg-turbo: Invalid memory access in the fillinputbuffer function CVE-2017-9614 - libjpeg-turbo before...

libjpeg-turbo 1.5.1 - Denial of Service

libjpeg-turbo denial of service vulnerability ====================== Author : qflb.wu CVE : CVE-2017-9614 ====================== Introduction: ============= libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON, AltiVec to accelerate baseline JPEG compression and...

libjpeg-turbo 1.5.1 - Denial of Service Vulnerability

Exploit for linux platform in category dos / poc libjpeg-turbo denial of service vulnerability ====================== Author : qflb.wu CVE : CVE-2017-9614 ====================== Introduction: ============= libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON,...

CVE-2017-9614

The fillinputbuffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted jpg file. NOTE: Maintainer asserts the issue is due to a bug in downstream cod...

CVE-2017-9614

CVE-2017-9614 affects libjpeg-turbo 1.5.1, where the fill_input_buffer function in jdatasrc.c can be exploited via a crafted JPEG file to cause a denial of service through invalid memory access and application crash. This vulnerability is documented across multiple sources (NVD entry; Red Hat/NES...

CVE-2017-9614

The fillinputbuffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted jpg file. NOTE: Maintainer asserts the issue is due to a bug in downstream cod...