CVE-2017-9614: Buffer Overflow

Published Jul 27, 2017

Updated

DISPUTED The fillinputbuffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted jpg file. NOTE: Maintainer asserts the issue is due to a bug in downstream code caused by misuse of the libjpeg API.

Affected Software

1 affected component

D.r.commander Libjpeg-turbo=1.5.1

Event History

Jul 27, 2017

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Disputed

06:29 AM

Frequently Asked Questions

What is the severity of CVE-2017-9614?

CVE-2017-9614 has been categorized as a denial of service vulnerability which can lead to application crashes.

How do I fix CVE-2017-9614?

To mitigate CVE-2017-9614, upgrade to a newer version of libjpeg-turbo that addresses this specific vulnerability.

What versions of libjpeg-turbo are affected by CVE-2017-9614?

CVE-2017-9614 specifically affects libjpeg-turbo version 1.5.1.

Can CVE-2017-9614 be exploited remotely?

Yes, CVE-2017-9614 can be exploited remotely through crafted JPG files.

What type of impact can CVE-2017-9614 have?

CVE-2017-9614 can result in an invalid memory access, potentially causing an application crash.