USN-5497-1: Libjpeg6b vulnerabilities
It was discovered that Libjpeg6b was not properly performing bounds checks when compressing PPM and Targa image files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-11212) Chijin Zhou discovered that Libjpeg6b was incorrectly handling the EOF character in input data when generating JPEG files. An attacker could possibly use this issue to force the execution of a large loop, force excessive memory consumption, and cause a denial of service. (CVE-2018-11813) Sheng Shu and Dongdong She discovered that Libjpeg6b was not properly limiting the amount of memory being used when it was performing decompression or multi-pass compression operations. An attacker could possibly use this issue to force excessive memory consumption and cause a denial of service. (CVE-2020-14152)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is CVE-2018-11212.
What is the severity of USN-5497-1?
The severity of USN-5497-1 is medium.
How does the vulnerability CVE-2018-11212 affect Libjpeg6b?
The vulnerability CVE-2018-11212 in Libjpeg6b allows an attacker to cause a denial of service by exploiting improper bounds checks when compressing PPM and Targa image files.
Which versions of Libjpeg6b are affected by the vulnerability?
Libjpeg6b version 6b1-4ubuntu1+esm1 is specifically affected by this vulnerability.
What is the remedy for the vulnerability in Libjpeg6b?
The remedy for the vulnerability in Libjpeg6b is to update to version 6b1-4ubuntu1+esm1.