jbig2dec bug fix and enhancement update

An update is available for jbig2dec. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

CentOS 8 : jbig2dec (CESA-2020:2897)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:2897 advisory. - jbig2dec: heap-based buffer overflow in jbig2imagecompose in jbig2image.c CVE-2020-12268 Note that Nessus has not tested for this issue but has instead relied...

Denial Of Service (DoS)

jbig2dec is vulnerable to denial of service DoS. The vulnerability jbig2imagecompose in jbig2image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow...

Authorization Bypass

jbig2dec is vulnerable to authorization bypass. The vulnerability exists as out-of-bounds writes and reads can be caused through integer overflow in the jbig2imagecompose function in jbig2image.c when parsing a .jb2 file...

Denial Of Service (DoS)

Artifex jbig2dec is vulnerable to denial of service. A heap-based buffer over-read in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a allows an attacker to crash the application via a malicious .jb2 file...

Denial Of Service (DoS)

jbig2dec is vulnerable to denial of service DoS. The vulnerability exists through a heap based buffer overflow in the jbig2decodegrayscaleimage function,...

Important: Red Hat Security Advisory: jbig2dec security update

An update for jbig2dec is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c

An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...

RHEL 8 : jbig2dec (RHSA-2020:3043)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3043 advisory. jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: jbig2dec: heap-based buffer overflow in jbig2imagecompose...

jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c

An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...

Important: Red Hat Security Advisory: jbig2dec security update

An update for jbig2dec is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 8 : jbig2dec (RHSA-2020:2971)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2971 advisory. jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: jbig2dec: heap-based buffer overflow in jbig2imagecompose...

Oracle Linux 8 : jbig2dec (ELSA-2020-2897)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-2897 advisory. 0.14-4 - Add explicit package version requirement on jbig2dec-libs to jbig2dec related: 1851057 0.14-3 - Fix CVE-2020-12268 resolves: 1851057 Tenable has...

jbig2dec security update

0.14-4 - Add explicit package version requirement on jbig2dec-libs to jbig2dec related: 1851057 0.14-3 - Fix CVE-2020-12268 resolves: 1851057...

Important: Red Hat Security Advisory: jbig2dec security update

An update for jbig2dec is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: jbig2dec security update

jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: jbig2dec: heap-based buffer overflow in jbig2imagecompose in jbig2image.c CVE-2020-12268 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

RHEL 8 : jbig2dec (RHSA-2020:2897)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2897 advisory. jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: jbig2dec: heap-based buffer overflow in jbig2imagecompose...

jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5970349664763904 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jbig2arithdecode jbig2decoderefinementTPGR...

CVE-2020-12268

An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...

MGASA-2020-0213 Updated jbig2dec packages fix security vulnerability

Updated jbig2dec packages fix security vulnerability: jbig2imagecompose in jbig2image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow CVE-2020-12268...