In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits on resource consumption or image sizes

An update of the libjpeg package has been released.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libjpeg-turbo: Invalid memory access in the fill_input_buffer function (CVE-2017-9614)

  - libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress     gigapixel images (CVE-2019-2201)

  - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG     file, related to the Exif marker. (CVE-2014-9092)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress     gigapixel images (CVE-2019-2201)

  - libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)

  - In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive     JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's     expectation, for use cases in which this memory usage would be a denial of service, is that the     application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits     on resource consumption or image sizes (CVE-2019-13960)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libjpeg-turbo: Invalid memory access in the fill_input_buffer function (CVE-2017-9614)

  - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG     file, related to the Exif marker. (CVE-2014-9092)

  - libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
    (CVE-2017-15232)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
202903	Photon OS 1.0: Libjpeg PHSA-2020-1.0-0327	Nessus	PhotonOS Local Security Checks	high
200025	RHEL 7 : libjpeg-turbo (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199998	RHEL 8 : libjpeg-turbo (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199984	RHEL 6 : libjpeg-turbo (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2019-13960

medium

Tenable Plugins

high

high

high

high