[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2018:1825-1 -- SLES jpeg, libjpeg

ID: oval:org.secpod.oval:def:89002519Date: (C)2021-02-26   (M)2022-10-10
Class: PATCHFamily: unix




This update for jpeg fixes the following issues: * CVE-2017-15232: NULL pointer dereferences in jdpostct.c and jquant1.c could lead to denial of service when processing images [bsc#1062937] * CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c, which allowed remote attackers to cause a denial-of-service via crafted JPG files due to a large loop [bsc#1096209] * CVE-2018-1152: Fixed a denial of service in start_input_bmp rdbmp.c caused by a divide by zero when processing a crafted BMP image [bsc#1098155]

Platform:
SUSE Linux Enterprise Server 11 SP4
Product:
jpeg
libjpeg
Reference:
SUSE-SU-2018:1825-1
CVE-2017-15232
CVE-2018-1152
CVE-2018-11813
CVE    3
CVE-2017-15232
CVE-2018-1152
CVE-2018-11813
CPE    3
cpe:/a:d.r.commander:libjpeg
cpe:/a:d.r.commander:jpeg
cpe:/o:suse:suse_linux_enterprise_server:11:sp4

© SecPod Technologies