Lucene search
+L

1491 matches found

Tenable Nessus
Tenable Nessus
•added 2019/01/17 12:00 a.m.•253 views

Oracle Java SE 1.7.x < 1.7.0_211 / 1.8.x < 1.8.0_201 / 1.11.x < 1.11.0_2 Multiple Vulnerabilities (January 2019 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 211, 8 Update 201, 11 Update 2. It is, therefore, affected by multiple vulnerabilities related to the following components : - An issue in libjpeg 9a, a divide-by-zero error, could...

6.5CVSS6.5AI score0.04832EPSS
SaveExploits1References6
Veracode
Veracode
•added 2019/01/15 8:53 a.m.•31 views

Information Disclosure

libjpeg-turbo is vulnerable to information disclosure attacks. The vulnerability exists due to the getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplication...

5CVSS7AI score0.0973EPSS
SaveExploits0References54Affected Software2
Kaspersky
Kaspersky
•added 2019/01/15 12:00 a.m.•238 views

KLA11403 Multiple vulnerabilities in Oracle Java SE

Multiple vulnerabilities were found in Oracle Java SE. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A divide by zero vulnerability in libjpeg ImageIO component can be exploited remotely ...

6.5CVSS6.4AI score0.04832EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2019/01/10 5:50 p.m.•29 views

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS2.8AI score0.02006EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/01/03 12:00 a.m.•35 views

Fedora 28 : libjpeg-turbo (2018-0e72ef852a)

Fix for CVE-2018-11813. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

7.5CVSS6.6AI score0.03188EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/12/24 12:00 a.m.•16 views

libjpeg-turbo Integer Overflow Vulnerability

libjpeg is a C library that contains JPEG decoding and JPEG encoding functions. libjpeg-turbo is an optimized version of libjpeg. An integer overflow vulnerability exists in the 'tjLoadImage' function in libjpeg-turbo version 2.0.1. An attacker can exploit this vulnerability to cause a heap-based...

8.8CVSS9AI score0.02006EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/12/21 9:29 a.m.•36 views

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.4AI score0.02006EPSS
SaveExploits0References2
Prion
Prion
•added 2018/12/21 9:29 a.m.•25 views

Integer overflow

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

6.8CVSS8.7AI score0.02006EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2018/12/21 9:29 a.m.•13 views

UBUNTU-CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.5AI score0.02006EPSS
SaveExploits0References3
OSV
OSV
•added 2018/12/21 9:29 a.m.•8 views

ALPINE-CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.4AI score0.02006EPSS
SaveExploits0References1
NVD
NVD
•added 2018/12/21 9:29 a.m.•25 views

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS8.4AI score0.02006EPSS
SaveExploits0References2
CVE
CVE
•added 2018/12/21 9:00 a.m.•123 views

CVE-2018-20330

CVE-2018-20330 affects libjpeg-turbo 2.0.1, where tjLoadImage on BMP images can overflow due to a miscomputed pitch_height product, causing a heap-based buffer overflow. Documented impacts include high-severity potential for confidentiality, integrity, and availability (CVSS v3.0: AV:N/AC:L/PR:N/...

8.8CVSS8.1AI score0.02006EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/12/21 9:00 a.m.•71 views

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.2AI score0.02006EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2018/12/21 9:00 a.m.•119 views

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS8.3AI score0.02006EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/12/21 9:00 a.m.•102 views

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS8.9AI score0.02006EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/12/21 12:00 a.m.•1 views

PT-2018-15313

Name of the Vulnerable Software and Affected Versions libjpeg-turbo version 2.0.1 Description The issue is related to an integer overflow in the tjLoadImage function, which can lead to a heap-based buffer overflow. This occurs when processing a BMP image, specifically due to the mishandling of th...

8.8CVSS0.02006EPSS
SaveExploits0References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/21 12:00 a.m.•4 views

CVE-2018-20330: Integer Overflow or Wraparound

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.9AI score0.02006EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2018/12/04 11:19 p.m.•36 views

CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

6.5CVSS2.8AI score0.01707EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/12/03 12:00 a.m.•1 views

PT-2018-2817

Name of the Vulnerable Software and Affected Versions libjpeg-progs affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters in the wrjpgcom application of the libjpeg-progs program for working with JPEG files. Exploitation of th...

3.6CVSS6.1AI score
SaveExploits0References2
Prion
Prion
•added 2018/11/29 8:29 a.m.•25 views

Heap overflow

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...

4.3CVSS6.6AI score0.01707EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder