In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libjpeg-turbo: Invalid memory access in the fill_input_buffer function (CVE-2017-9614)

  - libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress     gigapixel images (CVE-2019-2201)

  - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG     file, related to the Exif marker. (CVE-2014-9092)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress     gigapixel images (CVE-2019-2201)

  - libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)

  - In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive     JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's     expectation, for use cases in which this memory usage would be a denial of service, is that the     application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits     on resource consumption or image sizes (CVE-2019-13960)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3037 advisory.

  - In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due     to a missing bounds check. This could lead to remote code execution in an unprivileged process with no     additional execution privileges needed. User interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338 (CVE-2019-2201)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Libjpeg-turbo all version have a stack-based buffer     overflow in the 'transform' component. A remote     attacker can send a malformed jpeg file to the service     and cause arbitrary code execution or denial of service     of the target service.(CVE-2020-17541)

  - In IJG JPEG (aka libjpeg) before 9d,     jpeg_mem_available() in jmemnobs.c in djpeg does not     honor the max_memory_to_use setting, possibly causing     excessive memory consumption.(CVE-2020-14152)

  - In generate_jsimd_ycc_rgb_convert_neon of     jsimd_arm64_neon.S, there is a possible out of bounds     write due to a missing bounds check. This could lead to     remote code execution in an unprivileged process with     no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-120551338(CVE-2019-2201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In generate_jsimd_ycc_rgb_convert_neon of     jsimd_arm64_neon.S, there is a possible out of bounds     write due to a missing bounds check. This could lead to     remote code execution in an unprivileged process with     no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-120551338(CVE-2019-2201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In generate_jsimd_ycc_rgb_convert_neon of     jsimd_arm64_neon.S, there is a possible out of bounds     write due to a missing bounds check. This could lead to     remote code execution in an unprivileged process with     no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-120551338(CVE-2019-2201)

  - libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in     jdpostct.c and jquant1.c via a crafted JPEG     file.(CVE-2017-15232)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In generate_jsimd_ycc_rgb_convert_neon of     jsimd_arm64_neon.S, there is a possible out of bounds     write due to a missing bounds check. This could lead to     remote code execution in an unprivileged process with     no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-120551338(CVE-2019-2201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libjpeg-turbo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In generate_jsimd_ycc_rgb_convert_neon of     jsimd_arm64_neon.S, there is a possible out of bounds     write due to a missing bounds check. This could lead to     remote code execution in an unprivileged process with     no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-120551338(CVE-2019-2201)

  - libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in     jdpostct.c and jquant1.c via a crafted JPEG     file.(CVE-2017-15232)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The tjLoadImage function in libjpeg-turbo 2.0.1 has an     integer overflow with a resultant heap-based buffer     overflow via a BMP image because multiplication of     pitch and height is mishandled, as demonstrated by     tjbench.(CVE-2018-20330)

  - In generate_jsimd_ycc_rgb_convert_neon of     jsimd_arm64_neon.S, there is a possible out of bounds     write due to a missing bounds check. This could lead to     remote code execution in an unprivileged process with     no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-120551338(CVE-2019-2201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The tjLoadImage function in libjpeg-turbo 2.0.1 has an     integer overflow with a resultant heap-based buffer     overflow via a BMP image because multiplication of     pitch and height is mishandled, as demonstrated by     tjbench.(CVE-2018-20330)

  - In generate_jsimd_ycc_rgb_convert_neon of     jsimd_arm64_neon.S, there is a possible out of bounds     write due to a missing bounds check. This could lead to     remote code execution in an unprivileged process with     no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-120551338(CVE-2019-2201)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libjpeg-turbo fixes the following issues :

CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202003-23 (libjpeg-turbo: User-assisted execution of arbitrary code)

    It was discovered that libjpeg-turbo incorrectly handled certain JPEG       images.
  Impact :

    A remote attacker could entice a user to open a specially crafted JPEG       file in an application linked against libjpeg-turbo, possibly resulting       in execution of arbitrary code with the privileges of the process or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for libjpeg-turbo fixes the following issues :

  - CVE-2019-2201: Several integer overflow issues and     subsequent segfaults occurred in libjpeg-turbo, when     attempting to compress or decompress gigapixel images.
    [bsc#1156402]

This update was imported from the SUSE:SLE-15:Update update project.

Security fix for CVE-2019-2201.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4190-1 advisory.

    It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly     use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04     LTS. (CVE-2018-14498)

    It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. An attacker could possibly     use this issue to expose sensitive information. This issue only affected Ubuntu 19.04. (CVE-2018-19664)

    It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly     use this issue to execute arbitrary code. This issue only affected Ubuntu 19.04. (CVE-2018-20330)

    It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. An attacker could possibly     cause a denial of service or execute arbitrary code. (CVE-2019-2201)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
200025	RHEL 7 : libjpeg-turbo (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199998	RHEL 8 : libjpeg-turbo (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196313	RHEL 6 : libjpeg-turbo (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
161725	Debian DLA-3037-1 : libjpeg-turbo - LTS security update	Nessus	Debian Local Security Checks	high
153340	EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2021-2396)	Nessus	Huawei Local Security Checks	high
149109	EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2021-1810)	Nessus	Huawei Local Security Checks	high
148065	EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2021-1686)	Nessus	Huawei Local Security Checks	high
147569	EulerOS Virtualization 3.0.2.6 : libjpeg-turbo (EulerOS-SA-2021-1438)	Nessus	Huawei Local Security Checks	high
147457	EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2021-1405)	Nessus	Huawei Local Security Checks	high
147114	EulerOS Virtualization 3.0.6.6 : libjpeg-turbo (EulerOS-SA-2021-1489)	Nessus	Huawei Local Security Checks	high
140988	EulerOS Virtualization for ARM 64 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2020-2040)	Nessus	Huawei Local Security Checks	high
139965	EulerOS 2.0 SP8 : libjpeg-turbo (EulerOS-SA-2020-1862)	Nessus	Huawei Local Security Checks	high
138251	SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2019:2971-2)	Nessus	SuSE Local Security Checks	high
134600	GLSA-202003-23 : libjpeg-turbo: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
131158	openSUSE Security Update : libjpeg-turbo (openSUSE-2019-2530)	Nessus	SuSE Local Security Checks	high
131157	openSUSE Security Update : libjpeg-turbo (openSUSE-2019-2529)	Nessus	SuSE Local Security Checks	high
131108	Fedora 31 : libjpeg-turbo (2019-eee0d6c6f8)	Nessus	Fedora Local Security Checks	high
131069	SUSE SLED12 / SLES12 Security Update : libjpeg-turbo (SUSE-SU-2019:2972-1)	Nessus	SuSE Local Security Checks	high
131068	SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2019:2971-1)	Nessus	SuSE Local Security Checks	high
131016	Ubuntu 16.04 LTS / 18.04 LTS : libjpeg-turbo vulnerabilities (USN-4190-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2019-2201

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high