The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3297-1 advisory.

    Bingchang Liu discovered that jbig2dec incorrectly handled memory when decoding malformed image files. If     a user or automated system were tricked into processing a specially crafted JBIG2 image file, a remote     attacker could cause jbig2dec to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only applied to Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-9601)

    It was discovered that jbig2dec incorrectly handled memory when decoding malformed image files. If a user     or automated system were tricked into processing a specially crafted JBIG2 image file, a remote attacker     could cause jbig2dec to crash, resulting in a denial of service, or possibly disclose sensitive     information. (CVE-2017-7885)

    Jiaqi Peng discovered that jbig2dec incorrectly handled memory when decoding malformed image files. If a     user or automated system were tricked into processing a specially crafted JBIG2 image file, a remote     attacker could cause jbig2dec to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2017-7975)

    Dai Ge discovered that jbig2dec incorrectly handled memory when decoding malformed image files. If a user     or automated system were tricked into processing a specially crafted JBIG2 image file, a remote attacker     could cause jbig2dec to crash, resulting in a denial of service, or possibly disclose sensitive     information. (CVE-2017-7976)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS : jbig2dec vulnerabilities (USN-3297-1)

high Nessus Plugin ID 100413

Version 3.9