CVE-2006-3005

2006-06-1310:02:00

mitre

web.nvd.nist.gov

jpeg library

media-libs

denial of service

gentoo linux

memory exhaustion

cve-2006-3005

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.9

Confidence

High

EPSS

0.005

Percentile

77.2%

JSON

The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted JPEG file that exceeds the intended memory limits.

Affected configurations

Nvd

Node

gentoomedia-libs_jpegMatch6br2

gentoomedia-libs_jpegMatch6br3

gentoomedia-libs_jpegMatch6br4

gentoomedia-libs_jpegMatch6br5

gentoomedia-libs_jpegMatch6br6

Node

gentoolinux

VendorProductVersionCPE
gentoomedia-libs_jpeg6bcpe:2.3:a:gentoo:media-libs_jpeg:6b:r2:*:*:*:*:*:*
gentoomedia-libs_jpeg6bcpe:2.3:a:gentoo:media-libs_jpeg:6b:r3:*:*:*:*:*:*
gentoomedia-libs_jpeg6bcpe:2.3:a:gentoo:media-libs_jpeg:6b:r4:*:*:*:*:*:*
gentoomedia-libs_jpeg6bcpe:2.3:a:gentoo:media-libs_jpeg:6b:r5:*:*:*:*:*:*
gentoomedia-libs_jpeg6bcpe:2.3:a:gentoo:media-libs_jpeg:6b:r6:*:*:*:*:*:*
gentoolinux*cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gentoo	media-libs_jpeg	6b	cpe:2.3:a:gentoo:media-libs_jpeg:6b:r2::::::
gentoo	media-libs_jpeg	6b	cpe:2.3:a:gentoo:media-libs_jpeg:6b:r3::::::
gentoo	media-libs_jpeg	6b	cpe:2.3:a:gentoo:media-libs_jpeg:6b:r4::::::
gentoo	media-libs_jpeg	6b	cpe:2.3:a:gentoo:media-libs_jpeg:6b:r5::::::
gentoo	media-libs_jpeg	6b	cpe:2.3:a:gentoo:media-libs_jpeg:6b:r6::::::
gentoo	linux	*	cpe:2.3:o:gentoo:linux::::::::