Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2013-6630
HistoryNov 18, 2013 - 12:00 a.m.

CVE-2013-6630

2013-11-1800:00:00
ubuntu.com
ubuntu.com
13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.006

Percentile

78.3%

JSON

The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used
in Google Chrome before 31.0.1650.48 and other products, does not set all
elements of a certain Huffman value array during the reading of segments
that follow Define Huffman Table (DHT) JPEG markers, which allows remote
attackers to obtain sensitive information from uninitialized memory
locations via a crafted JPEG image.

Bugs

Notes

Author Note
seth-arnold The fix is to initialize huffval[].
mdeslaur Although original report seems to indicate libjpeg6b isn’t affected, that particular code is identical.
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 26.0+build2-0ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchfirefox< 26.0+build2-0ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchfirefox< 26.0+build2-0ubuntu0.13.04.2UNKNOWN
ubuntu13.10noarchfirefox< 26.0+build2-0ubuntu0.13.10.2UNKNOWN
ubuntu12.04noarchlibjpeg-turbo< 1.1.90+svn733-0ubuntu4.3UNKNOWN
ubuntu12.10noarchlibjpeg-turbo< 1.2.1-0ubuntu2.12.10.1UNKNOWN
ubuntu13.04noarchlibjpeg-turbo< 1.2.1-0ubuntu2.13.04.1UNKNOWN
ubuntu13.10noarchlibjpeg-turbo< 1.3.0-0ubuntu1.1UNKNOWN
ubuntu10.04noarchlibjpeg6b< 6b-15ubuntu1.1UNKNOWN
ubuntu12.04noarchlibjpeg6b< 6b1-2ubuntu1.1UNKNOWN
Rows per page:
1-10 of 171

Related

cvelist 1
nvd 1
f5 2
nessus 49
prion 1
cve 1
debiancve 1
fedora 6
openvas 35
centos 1
ubuntu 3
amazon 1
redhat 2
mageia 2
mozilla 1
veracode 1
gentoo 1
securityvulns 6
oraclelinux 1
ibm 2
threatpost 1
debian 2
freebsd 2
chrome 1
osv 1
suse 5
cvelist
cvelist
CVE-2013-6630
2013-11-15 20:00:00
nvd
nvd
CVE-2013-6630
2013-11-19 04:50:56
f5
f5
SOL62655427 - libjpeg-turbo vulnerability CVE-2013-6630
2016-02-18 00:00:00
K62655427 : libjpeg-turbo vulnerability CVE-2013-6630
2016-02-19 00:00:00
nessus
nessus
F5 Networks BIG-IP : libjpeg-turbo vulnerability (K62655427)
2016-02-22 00:00:00
Mandriva Linux Security Advisory : libjpeg (MDVSA-2013:273)
2013-11-22 00:00:00
Fedora 19 : mingw-libjpeg-turbo-1.3.1-1.fc19 (2014-6859)
2014-06-10 00:00:00
prion
prion
Memory corruption
2013-11-19 04:50:00
cve
cve
CVE-2013-6630
2013-11-19 04:50:56
debiancve
debiancve
CVE-2013-6630
2013-11-19 04:50:56
fedora
fedora
[SECURITY] Fedora 19 Update: libjpeg-turbo-1.2.90-3.fc19
2014-01-10 07:56:56
[SECURITY] Fedora 19 Update: mingw-libjpeg-turbo-1.3.1-1.fc19
2014-06-10 03:13:25
[SECURITY] Fedora 20 Update: libjpeg-turbo-1.3.0-2.fc20
2013-12-24 03:42:20
openvas
openvas
CentOS Update for libjpeg-turbo CESA-2013:1803 centos6
2013-12-17 00:00:00
Ubuntu: Security Advisory (USN-2060-1)
2013-12-23 00:00:00
Mageia: Security Advisory (MGASA-2013-0333)
2022-01-28 00:00:00
centos
centos
libjpeg security update
2013-12-10 01:01:49
ubuntu
ubuntu
libjpeg, libjpeg-turbo vulnerabilities
2013-12-19 00:00:00
Thunderbird vulnerabilities
2013-12-11 00:00:00
Firefox vulnerabilities
2013-12-11 00:00:00
amazon
amazon
Medium: libjpeg-turbo
2013-12-17 21:32:00
redhat
redhat
(RHSA-2013:1803) Moderate: libjpeg-turbo security update
2013-12-09 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
mageia
mageia
Updated libjpeg packages fix vulnerabilities in libjpeg-turbo
2013-11-21 00:31:46
Updated chromium-browser-stable packages fix multiple vulnerabilities
2013-11-13 23:09:45
mozilla
mozilla
JPEG information leak — Mozilla
2013-12-10 00:00:00
veracode
veracode
Sensitive Information Disclosure
2019-05-02 05:00:31
gentoo
gentoo
libjpeg-turbo: Multiple vulnerabilities
2016-06-05 00:00:00
securityvulns
securityvulns
bugs in IJG jpeg6b &amp; libjpeg-turbo
2013-12-09 00:00:00
[ MDVSA-2013:274 ] libjpeg
2013-11-26 00:00:00
libjpeg multiple security vulnerabilities
2013-12-09 00:00:00
oraclelinux
oraclelinux
libjpeg-turbo security update
2013-12-09 00:00:00
ibm
ibm
Security Bulletin: IBM Transform Services for IBM i is vulnerable to denial of service, buffer overflow, and allowing attacker to obtain sensitive information due to multiple vulnerabilities.
2022-11-17 15:02:38
Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS
2022-06-03 14:32:29
threatpost
threatpost
12 Flaws Fixed in Google Chrome
2013-11-12 13:17:53
debian
debian
[SECURITY] [DSA 2797-1] chromium-browser security update
2013-11-17 15:42:38
[SECURITY] [DSA 2797-1] chromium-browser security update
2013-11-17 15:42:38
freebsd
freebsd
chromium -- multiple vulnerabilities
2013-11-12 00:00:00
mozilla -- multiple vulnerabilities
2013-12-09 00:00:00
chrome
chrome
Stable Channel Update
2013-11-12 00:00:00
osv
osv
chromium-browser - several
2013-11-16 00:00:00
suse
suse
chromium: update to 31.0.1650.57 (important)
2013-11-27 20:04:35
Mozilla updates 2013/12 (important)
2013-12-13 15:04:36
chromium: 31.0.1650.57 version update (important)
2013-11-27 20:04:13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.006

Percentile

78.3%

JSON
Related for UB:CVE-2013-6630
cvelist1nvd1f52nessus49prion1cve1debiancve1fedora6openvas35centos1ubuntu3amazon1redhat2mageia2mozilla1veracode1gentoo1securityvulns6oraclelinux1ibm2threatpost1debian2freebsd2chrome1osv1suse5