1407 matches found
DEBIAN-CVE-2018-10126
ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...
CVE-2018-10126
ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...
CVE-2018-10126
ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...
The vulnerability of the jdpostct and jquant1 components of the libjpeg-turbo image processing library allows a hacker to induce a service failure.
The vulnerability of the components jdpostct jdpostct.c and jquant1 jquant1.c of the image processing library libjpeg-turbo is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by using a specially crafte...
MGASA-2018-0145 Updated qpdf packages fix security vulnerabilities
Updated qpdf packages fix security vulnerabilities: 1. Stack overflow due to endless recursion in QPDFTokenizer::resolveLiteral 2. Another stack overflow / endless recursion in QPDFWriter::enqueueObject 3. Stack out of bounds read in iteraterc4 4. heap out of bounds read large in PlBuffer::write ...
Updated qpdf packages fix security vulnerabilities
Updated qpdf packages fix security vulnerabilities: 1. Stack overflow due to endless recursion in QPDFTokenizer::resolveLiteral 2. Another stack overflow / endless recursion in QPDFWriter::enqueueObject 3. Stack out of bounds read in iteraterc4 4. heap out of bounds read large in...
openSUSE Security Update : libjpeg-turbo (openSUSE-2018-141)
This update for libjpeg-turbo fixes the following security issue : - CVE-2017-15232: Fix NULL pointer dereference in jdpostct.c and jquant1.c - additional fixes bsc1062937 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
SUSE SLED12 / SLES12 Security Update : libjpeg-turbo (SUSE-SU-2018:0373-1)
This update for libjpeg-turbo fixes the following issues: Feature update : - Update from version 1.3.1 to version 1.5.2 fate324061. Security issue fixed : - CVE-2017-15232: Fix NULL pointer dereference in jdpostct.c and jquant1.c bsc1062937. Note that Tenable Network Security has extracted the...
SUSE-SU-2018:0373-1 Security update for libjpeg-turbo
This update for libjpeg-turbo fixes the following issues: Feature update: - Update from version 1.3.1 to version 1.5.2 fate324061. Security issue fixed: - CVE-2017-15232: Fix NULL pointer dereference in jdpostct.c and jquant1.c bsc1062937...
ImageWorsener Denial of Service Vulnerability
ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the 'getrawsampleint' function in the imagew-main.c file of the libimageworsener.a file in ImageWorsener version 1.3.2. When libjpeg 8d is used, an attacker can exploit this vulnerability to cause...
Code injection
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the getrawsampleint function in imagew-main.c...
CVE-2018-5252
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the getrawsampleint function in imagew-main.c...
CVE-2018-5252
CVE-2018-5252 affects ImageWorsener 1.3.2 (libimageworsener.a) when linked with libjpeg 8d. The vulnerability is described as a large loop in get_raw_sample_int in imagew-main.c, leading to denial of service. Multiple sources (CNVD, NVD, Red Hat entry) corroborate the vulnerable component and ver...
CVE-2018-5252
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the getrawsampleint function in imagew-main.c...
Critical Photon OS Security Update - PHSA-2017-0007
Updates of 'libjpeg-turbo', 'krb5' packages of Photon OS have been released...
MGASA-2017-0407 Updated libjpeg packages fix a security vulnerability
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. CVE-2017-15232...
Updated libjpeg packages fix a security vulnerability
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. CVE-2017-15232...
openSUSE Security Update : libjpeg-turbo (openSUSE-2017-1218)
This update for libjpeg-turbo to version 1.5.2 fixes the following issues : - CVE-2017-15232: NULL pointer dereference in jdpostct.c and jquant1.c boo1062937 This compatible version update contains the following improvements : - Improved and updated upsampling support and sampling factors - Memor...