Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.12.2018.3706.2
Category:Ubuntu Local Security Checks
Title:Ubuntu: Security Advisory (USN-3706-2)
Summary:The remote host is missing an update for the 'libjpeg-turbo' package(s) announced via the USN-3706-2 advisory.
Description:Summary:
The remote host is missing an update for the 'libjpeg-turbo' package(s) announced via the USN-3706-2 advisory.

Vulnerability Insight:
USN-3706-1 fixed a vulnerability in libjpeg-turbo. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

It was discovered that libjpeg-turbo incorrectly handled certain malformed
JPEG images. If a user or automated system were tricked into opening a
specially crafted JPEG image, a remote attacker could cause libjpeg-turbo
to crash, resulting in a denial of service, or possibly execute arbitrary
code.

Affected Software/OS:
'libjpeg-turbo' package(s) on Ubuntu 12.04.

Solution:
Please install the updated package(s).

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2014-9092
BugTraq ID: 71326
http://www.securityfocus.com/bid/71326
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147336.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147315.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150957.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150967.html
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26482&sid=81658bc2f51a8d9893279cd01e83783f
https://tapani.tarvainen.info/linux/convertbug/
http://www.openwall.com/lists/oss-security/2014/11/26/8
https://usn.ubuntu.com/3706-1/
https://usn.ubuntu.com/3706-2/
Common Vulnerability Exposure (CVE) ID: CVE-2016-3616
https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html
RedHat Security Advisories: RHSA-2019:2052
https://access.redhat.com/errata/RHSA-2019:2052
Common Vulnerability Exposure (CVE) ID: CVE-2018-11212
BugTraq ID: 106583
http://www.securityfocus.com/bid/106583
https://security.netapp.com/advisory/ntap-20190118-0001/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03958en_us
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
http://www.ijg.org/
https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a
https://github.com/zzyyrr/divide-by-zero-in-libjpeg-9d.git
https://www.oracle.com/security-alerts/cpuapr2022.html
RedHat Security Advisories: RHSA-2019:0469
https://access.redhat.com/errata/RHSA-2019:0469
RedHat Security Advisories: RHSA-2019:0472
https://access.redhat.com/errata/RHSA-2019:0472
RedHat Security Advisories: RHSA-2019:0473
https://access.redhat.com/errata/RHSA-2019:0473
RedHat Security Advisories: RHSA-2019:0474
https://access.redhat.com/errata/RHSA-2019:0474
RedHat Security Advisories: RHSA-2019:0640
https://access.redhat.com/errata/RHSA-2019:0640
RedHat Security Advisories: RHSA-2019:1238
https://access.redhat.com/errata/RHSA-2019:1238
SuSE Security Announcement: openSUSE-SU-2019:0346 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html
SuSE Security Announcement: openSUSE-SU-2019:1439 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
SuSE Security Announcement: openSUSE-SU-2019:1500 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html
Common Vulnerability Exposure (CVE) ID: CVE-2018-11213
Common Vulnerability Exposure (CVE) ID: CVE-2018-11214
Common Vulnerability Exposure (CVE) ID: CVE-2018-1152
BugTraq ID: 104543
http://www.securityfocus.com/bid/104543
https://www.tenable.com/security/research/tra-2018-17
https://lists.debian.org/debian-lts-announce/2020/07/msg00033.html
SuSE Security Announcement: openSUSE-SU-2019:1118 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html
SuSE Security Announcement: openSUSE-SU-2019:1343 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html
CopyrightCopyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.