Описание
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libjpeg-turbo | fixed | 1:1.4.2-1 | package | |
| libjpeg6b | unfixed | package | ||
| libjpeg8 | unfixed | package | ||
| libjpeg8 | no-dsa | wheezy | package | |
| libjpeg9 | fixed | 1:9b-2 | package |
Примечания
libjpeg-turbo: Fixed by: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/6709e4a0cfa44d4f54ee8ad05753d4aa9260cb91 (1.4.2)
unimportant, since cjpeg not installed in binary package in any suite having src:libjpeg6b
cjpeg in src:libjpeg8 vulnerable, but not installed in binary package since 8d1-2
https://bugzilla.redhat.com/show_bug.cgi?id=1319661
https://bugzilla.redhat.com/show_bug.cgi?id=1318509
Связанные уязвимости
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
