Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-2806HistoryAug 13, 2012 - 8:55 p.m.
CVE-2012-2806
2012-08-1320:55:08
Debian Security Bug Tracker
security-tracker.debian.org
9
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.6%
Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large component count in the header of a JPEG image.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libjpeg-turbo | < 1:2.1.5-2 | libjpeg-turbo_1:2.1.5-2_all.deb |
| Debian | 11 | all | libjpeg-turbo | < 1:2.0.6-4 | libjpeg-turbo_1:2.0.6-4_all.deb |
| Debian | 999 | all | libjpeg-turbo | < 1:2.1.5-3 | libjpeg-turbo_1:2.1.5-3_all.deb |
| Debian | 13 | all | libjpeg-turbo | < 1:2.1.5-3 | libjpeg-turbo_1:2.1.5-3_all.deb |
Related
cve
cve
CVE-2012-2806
2012-08-13 20:55:08
openvas
openvas
Fedora Update for libjpeg-turbo FEDORA-2012-10721
2012-08-14 00:00:00
FreeBSD Ports: libjpeg-turbo
2012-08-10 00:00:00
Mandriva Update for libjpeg-turbo MDVSA-2012:121 (libjpeg-turbo)
2012-08-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package libjpeg-turbo version 2:1.2.1-alt1
2012-07-18 00:00:00
freebsd
freebsd
libjpeg-turbo -- heap-based buffer overflow
2012-05-31 00:00:00
nessus
nessus
GLSA-201209-13 : libjpeg-turbo: User-assisted execution of arbitrary code
2012-09-27 00:00:00
Mandriva Linux Security Advisory : libjpeg-turbo (MDVSA-2012:121)
2012-09-06 00:00:00
Fedora 16 : libjpeg-turbo-1.2.1-1.fc16 (2012-10721)
2012-08-10 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:121 ] libjpeg-turbo
2012-08-06 00:00:00
libjpeg-turbo
2012-08-06 00:00:00
[ MDVSA-2013:274 ] libjpeg
2013-11-26 00:00:00
cvelist
cvelist
CVE-2012-2806
2012-08-13 20:00:00
nvd
nvd
CVE-2012-2806
2012-08-13 20:55:08
fedora
fedora
[SECURITY] Fedora 16 Update: libjpeg-turbo-1.2.1-1.fc16
2012-08-09 22:50:16
gentoo
gentoo
libjpeg-turbo: User-assisted execution of arbitrary code
2012-09-26 00:00:00
ubuntucve
ubuntucve
CVE-2012-2806
2012-08-13 00:00:00
prion
prion
Heap overflow
2012-08-13 20:55:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.6%
Related for DEBIANCVE:CVE-2012-2806