Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2018.0327
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2018-0327)
Zusammenfassung:	The remote host is missing an update for the 'libjpeg' package(s) announced via the MGASA-2018-0327 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libjpeg' package(s) announced via the MGASA-2018-0327 advisory. Vulnerability Insight: Updated libjpeg package fixes security vulnerabilities: It was found that libjpeg is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image (CVE-2018-1152). It was found that libjpeg had a defect where, due to a mishandled EOF, a specially crafted malformed input file (specifically a file with a valid Targa header but incomplete pixel data) would cause cjpeg to generate a file that was potentially thousands of times larger than the input file (CVE-2018-11813). Affected Software/OS: 'libjpeg' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1152 BugTraq ID: 104543 http://www.securityfocus.com/bid/104543 https://www.tenable.com/security/research/tra-2018-17 https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html https://lists.debian.org/debian-lts-announce/2020/07/msg00033.html SuSE Security Announcement: openSUSE-SU-2019:1118 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html SuSE Security Announcement: openSUSE-SU-2019:1343 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html https://usn.ubuntu.com/3706-1/ https://usn.ubuntu.com/3706-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-11813 http://www.ijg.org/files/jpegsrc.v9d.tar.gz https://bugs.gentoo.org/727908 https://github.com/ChijinZ/security_advisories/blob/master/libjpeg-v9c/mail.pdf https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9c RedHat Security Advisories: RHSA-2019:2052 https://access.redhat.com/errata/RHSA-2019:2052
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.