USN-5336-1: libjpeg9 vulnerabilities
Aladdin Mubaied discovered that the cjpeg utility in libjpeg9 did not properly validate the input image's size. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2016-3616) It was discovered that the cjpeg utility in libjpeg9 incorrectly handled certain input. An attacker could possibly use these issues to cause a denial of service. (CVE-2018-11212, CVE-2018-11813, CVE-2020-14152, CVE-2020-14153) It was discovered that the cjpeg utility in libjpeg9 incorrectly handled memory when supplied with certain input. An attacker could possibly use these issues to cause a denial of service or execute arbitrary code. (CVE-2018-11213, CVE-2018-11214)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability in libjpeg9?
The vulnerability in libjpeg9 is CVE-2016-3616. It allows an attacker to cause a denial of service or execute arbitrary code.
How can the libjpeg9 vulnerability be exploited?
The libjpeg9 vulnerability can be exploited by manipulating the input image's size.
What is the severity of the libjpeg9 vulnerability?
The severity of the libjpeg9 vulnerability is dependent on the attacker's intent.
Which versions of libjpeg9 are affected by the vulnerability?
Versions up to exclusive 1:9b-1ubuntu1+esm1 of libjpeg9 are affected.
How can I fix the libjpeg9 vulnerability?
To fix the libjpeg9 vulnerability, update to version 1:9b-1ubuntu1+esm1 or later.