ID de Prueba:	1.3.6.1.4.1.25623.1.0.892302
Categoría:	Debian Local Security Checks
Título:	Debian LTS: Security Advisory for libjpeg-turbo (DLA-2302-1)
Resumen:	The remote host is missing an update for the 'libjpeg-turbo'; package(s) announced via the DLA-2302-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'libjpeg-turbo' package(s) announced via the DLA-2302-1 advisory. Vulnerability Insight: Several vulnerabilities were fixed in libjpeg-turbo, a widely used library for handling JPEG files. CVE-2018-1152 Denial of service vulnerability caused by a divide by zero when processing a crafted BMP image in TJBench. CVE-2018-14498 Denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries. CVE-2020-13790 Heap-based buffer over-read via a malformed PPM input file. CVE-2020-14152 jpeg_mem_available() did not honor the max_memory_to_use setting, possibly causing excessive memory consumption. Affected Software/OS: 'libjpeg-turbo' package(s) on Debian Linux. Solution: For Debian 9 stretch, these problems have been fixed in version 1:1.5.1-2+deb9u1. We recommend that you upgrade your libjpeg-turbo packages. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1152 BugTraq ID: 104543 http://www.securityfocus.com/bid/104543 https://www.tenable.com/security/research/tra-2018-17 https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html https://lists.debian.org/debian-lts-announce/2020/07/msg00033.html SuSE Security Announcement: openSUSE-SU-2019:1118 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html SuSE Security Announcement: openSUSE-SU-2019:1343 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html https://usn.ubuntu.com/3706-1/ https://usn.ubuntu.com/3706-2/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.