Rocky Linux 8 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (crlsa-2019_3705)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20193705 advisory. libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 Tenable has extracted the...

The vulnerability of the get_8bit_row function in the libjpeg library, which allows a hacker to cause a service failure

The vulnerability of the get8bitrow function in the libjpeg library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

CVE-2018-14498: Out-of-bounds Read

get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...