Lucene search
+L

1405 matches found

CNVD
CNVD
added 2020/06/04 12:0 a.m.3 views

libjpeg-turbo Buffer Overflow Vulnerability

libjpeg is a C language library for processing image data in JPEG format. The product includes JPEG decoding, JPEG encoding and other JPEG functions. libjpeg-turbo is an optimized and improved version of libjpeg. A buffer overflow vulnerability exists in the 'getrgbrow' function of the rdppm.c fi...

8.1CVSS6.8AI score0.03205EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/03 7:15 p.m.8 views

ALPINE-CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

8.1CVSS7.2AI score0.03205EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/03 7:15 p.m.34 views

CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

8.1CVSS7.3AI score
SaveExploits0References9
Prion
Prion
added 2020/06/03 7:15 p.m.28 views

Heap overflow

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

5.8CVSS7.8AI score0.03205EPSS
SaveExploits1References9Affected Software2
UbuntuCve
UbuntuCve
added 2020/06/03 7:15 p.m.30 views

CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

8.1CVSS6.9AI score0.03205EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2020/06/03 6:56 p.m.45 views

CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

8.1CVSS8.1AI score0.03205EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/06/03 6:56 p.m.40 views

CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

8.1CVSS7.3AI score0.03205EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/06/03 6:56 p.m.29 views

CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

8AI score0.03205EPSS
SaveExploits1References9
CVE
CVE
added 2020/06/03 6:56 p.m.370 views

CVE-2020-13790

CVE-2020-13790 affects libjpeg-turbo (2.0.4) and mozjpeg (4.0.0) with a heap-based buffer over-read in get_rgb_row() in rdppm.c triggered by a malformed PPM input file. Public advisories document this as a validated vulnerability with partial confidentiality and partial availability impact (NVD C...

8.1CVSS7.8AI score0.03205EPSS
SaveExploits1References9Affected Software2
FreeBSD
FreeBSD
added 2020/06/03 12:0 a.m.32 views

libjpeg-turbo -- Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function.

libjpeg-turbo releases reports: This release fixes the following security issue: Heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

8.1CVSS3.1AI score0.03205EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2020/05/01 12:0 a.m.37 views

EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2020-1555)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file,...

6.5CVSS6.6AI score0.03235EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/04/30 12:0 a.m.26 views

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-1555)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.03235EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/04/16 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-1483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.03235EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/04/16 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-1402)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.03235EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:0 a.m.30 views

EulerOS Virtualization 3.0.2.2 : libjpeg-turbo (EulerOS-SA-2020-1483)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of servi...

6.5CVSS6.4AI score0.03235EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/04/15 12:0 a.m.27 views

EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2020-1402)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.CVE-2017-15232 - libjpeg-turbo...

6.5CVSS6.5AI score0.03235EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/03/16 12:0 a.m.28 views

GLSA-202003-23 : libjpeg-turbo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202003-23 libjpeg-turbo: User-assisted execution of arbitrary code It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. Impact : A remote attacker could entice a user to open a specially crafted JPEG file ...

9.3CVSS7.7AI score0.02461EPSS
SaveExploits0References2
Gentoo Linux
Gentoo Linux
added 2020/03/15 12:0 a.m.124 views

libjpeg-turbo: User-assisted execution of arbitrary code

Background libjpeg-turbo is a MMX, SSE, and SSE2 SIMD accelerated JPEG library. Description It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. Impact A remote attacker could entice a user to open a specially crafted JPEG file in an application linked against...

9.3CVSS4.4AI score0.02461EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/02 12:0 a.m.26 views

Photon OS 3.0: Libjpeg PHSA-2020-3.0-0063

An update of the libjpeg package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0063. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134211;...

6.5CVSS6.5AI score0.01707EPSS
SaveExploits1References2
Photon
Photon
added 2020/02/28 12:0 a.m.43 views

Important Photon OS Security Update - PHSA-2020-0063

Updates of 'libjpeg-turbo', 'bindutils', 'unzip', 'libgd' packages of Photon OS have been released...

6.8CVSS1.7AI score0.08813EPSS
SaveExploits2
Rows per page
Query Builder