- Vulnerability/
- USN-3706-1
USN-3706-1: libjpeg-turbo vulnerabilities
First published: Mon Jul 09 2018(Updated: )
It was discovered that libjpeg-turbo incorrectly handled certain malformed JPEG images. If a user or automated system were tricked into opening a specially crafted JPEG image, a remote attacker could cause libjpeg-turbo to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libjpeg-turbo8 | <1.5.2-0ubuntu5.18.04.1 | 1.5.2-0ubuntu5.18.04.1 |
| Ubuntu OpenSSH Client | =18.04 | |
| All of | ||
| ubuntu/libjpeg-turbo8 | <1.5.2-0ubuntu5.17.10.1 | 1.5.2-0ubuntu5.17.10.1 |
| Ubuntu OpenSSH Client | =17.10 | |
| All of | ||
| ubuntu/libjpeg-turbo8 | <1.4.2-0ubuntu3.1 | 1.4.2-0ubuntu3.1 |
| Ubuntu OpenSSH Client | =16.04 | |
| All of | ||
| ubuntu/libjpeg-turbo8 | <1.3.0-0ubuntu2.1 | 1.3.0-0ubuntu2.1 |
| Ubuntu OpenSSH Client | =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2014-9092
- https://ubuntu.com/security/CVE-2016-3616
- https://ubuntu.com/security/CVE-2017-15232
- https://ubuntu.com/security/CVE-2018-11212
- https://ubuntu.com/security/CVE-2018-11213
- https://ubuntu.com/security/CVE-2018-11214
- https://ubuntu.com/security/CVE-2018-1152
- https://ubuntu.com/security/notices/USN-3706-2
- https://ubuntu.com/security/notices/USN-5336-1
- https://ubuntu.com/security/notices/USN-5497-1
- https://ubuntu.com/security/notices/USN-5497-2
- https://launchpad.net/ubuntu/+source/libjpeg-turbo/1.5.2-0ubuntu5.18.04.1
- https://launchpad.net/ubuntu/+source/libjpeg-turbo/1.5.2-0ubuntu5.17.10.1
- https://launchpad.net/ubuntu/+source/libjpeg-turbo/1.4.2-0ubuntu3.1
- https://launchpad.net/ubuntu/+source/libjpeg-turbo/1.3.0-0ubuntu2.1
- https://ubuntu.com/security/notices/USN-3706-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for libjpeg-turbo?
The vulnerability ID for libjpeg-turbo is USN-3706-1.
What is the severity of USN-3706-1?
The severity of USN-3706-1 is not specified.
How does libjpeg-turbo handle malformed JPEG images?
Libjpeg-turbo incorrectly handles certain malformed JPEG images.
What is the impact of the vulnerability in libjpeg-turbo?
If exploited, the vulnerability can cause libjpeg-turbo to crash, resulting in a denial of service or possible code execution.
How can I fix the libjpeg-turbo vulnerability?
Upgrade to version 1.5.2-0ubuntu5.18.04.1 for Ubuntu 18.04, 1.5.2-0ubuntu5.17.10.1 for Ubuntu 17.10, 1.4.2-0ubuntu3.1 for Ubuntu 16.04, or 1.3.0-0ubuntu2.1 for Ubuntu 14.04.
- agent/references
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu openssh client
- version/ubuntu openssh client/18.04
- version/ubuntu openssh client/17.10
- version/ubuntu openssh client/16.04
- version/ubuntu openssh client/14.04