REDHAT-BUG-1687424
First published: Mon Mar 11 2019(Updated: )
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries. Upstream patch: <a href="https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9c78a04df4e44ef6487eee99c4258397f4fdca55">https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9c78a04df4e44ef6487eee99c4258397f4fdca55</a> Upstream issue: <a href="https://github.com/libjpeg-turbo/libjpeg-turbo/issues/258">https://github.com/libjpeg-turbo/libjpeg-turbo/issues/258</a> References: <a href="https://github.com/mozilla/mozjpeg/issues/299">https://github.com/mozilla/mozjpeg/issues/299</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libjpeg-turbo | <=1.5.90 | |
| Mozilla MozJPEG | <=3.3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9c78a04df4e44ef6487eee99c4258397f4fdca55
- https://github.com/libjpeg-turbo/libjpeg-turbo/issues/258
- https://github.com/mozilla/mozjpeg/issues/299
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1687428
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1687430
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1687429
- https://access.redhat.com/errata/RHSA-2019:2052
- https://access.redhat.com/security/cve/cve-2018-14498
- https://access.redhat.com/errata/RHSA-2019:3705
- https://bugzilla.redhat.com/show_bug.cgi?id=1687424
Frequently Asked Questions
What is the severity of REDHAT-BUG-1687424?
The severity of REDHAT-BUG-1687424 is categorized as a denial of service vulnerability that can cause application crashes.
How do I fix REDHAT-BUG-1687424?
To fix REDHAT-BUG-1687424, update libjpeg-turbo to version 1.5.91 or later and MozJPEG to version 3.3.2 or later.
What software is affected by REDHAT-BUG-1687424?
REDHAT-BUG-1687424 affects libjpeg-turbo versions up to 1.5.90 and MozJPEG versions up to 3.3.1.
What type of attack can be executed using REDHAT-BUG-1687424?
An attacker can exploit REDHAT-BUG-1687424 to cause heap-based buffer over-reads leading to application crashes.
What mitigations are recommended for REDHAT-BUG-1687424?
It is recommended to validate BMP files to ensure that color indices are within permitted ranges before processing.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-14498
- agent/source
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/libjpeg-turbo
- canonical/libjpeg-turbo
- vendor/mozilla
- canonical/mozilla mozjpeg