REDHAT-BUG-1579973: Low severity libjpeg vulnerability

Published May 18, 2018

Updated

An issue was discovered in libjpeg version 9a. The allocsarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

References: https://github.com/ChijinZ/securityadvisories/tree/master/libjpeg-v9a

Affected Software

1 affected component

libjpeg libjpeg

Event History

May 18, 2018

Data Sourced

via Red Hat·09:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1579973?

The severity of REDHAT-BUG-1579973 is significant as it allows remote attackers to cause a denial of service through a divide-by-zero error.

How do I fix REDHAT-BUG-1579973?

To address REDHAT-BUG-1579973, update to the latest version of libjpeg that contains the necessary security patches.

What does REDHAT-BUG-1579973 affect?

REDHAT-BUG-1579973 affects the libjpeg software, specifically version 9a.

Can REDHAT-BUG-1579973 be exploited remotely?

Yes, REDHAT-BUG-1579973 can be exploited remotely if an attacker uses a crafted file to trigger the vulnerability.

Is there any workaround for REDHAT-BUG-1579973?

Currently, there are no official workarounds for REDHAT-BUG-1579973; updating libjpeg is the recommended solution.