Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2022-0353
HistoryOct 01, 2022 - 8:48 p.m.

Updated libjpeg packages fix security vulnerability

2022-10-0120:48:24
Gentoo Foundation
advisories.mageia.org
12
libjpeg
security vulnerability
heap-based buffer overflow
ppm reader
cve-2021-46822
unix

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

22.9%

JSON

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c. (CVE-2021-46822)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchlibjpeg< 2.0.8-1libjpeg-2.0.8-1.mga8

Related

rocky 1
cbl_mariner 1
openvas 15
nessus 21
nvd 1
cvelist 1
osv 4
prion 1
cve 1
debiancve 1
ubuntucve 1
redhatcve 1
oraclelinux 1
almalinux 1
redhat 1
amazon 1
ubuntu 1
cloudfoundry 1
ibm 1
rocky
rocky
libjpeg-turbo security update
2023-03-08 16:38:23
cbl_mariner
cbl_mariner
CVE-2021-46822 affecting package libjpeg-turbo 2.0.0-7
2022-07-14 20:59:55
openvas
openvas
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2022-2442)
2022-10-10 00:00:00
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2022-2351)
2022-09-26 00:00:00
Mageia: Security Advisory (MGASA-2022-0353)
2022-10-03 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : libjpeg-turbo (EulerOS-SA-2022-2325)
2022-09-14 00:00:00
EulerOS Virtualization 2.10.1 : libjpeg-turbo (EulerOS-SA-2022-2893)
2022-12-27 00:00:00
EulerOS Virtualization 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2023-2200)
2023-06-13 00:00:00
nvd
nvd
CVE-2021-46822
2022-06-18 16:15:08
cvelist
cvelist
CVE-2021-46822
2022-06-18 15:27:44
osv
osv
Moderate: libjpeg-turbo security update
2023-03-06 00:00:00
Moderate: libjpeg-turbo security update
2023-03-08 16:38:23
CVE-2021-46822
2022-06-18 16:15:08
prion
prion
Heap overflow
2022-06-18 16:15:00
cve
cve
CVE-2021-46822
2022-06-18 16:15:08
debiancve
debiancve
CVE-2021-46822
2022-06-18 16:15:08
ubuntucve
ubuntucve
CVE-2021-46822
2022-06-18 00:00:00
redhatcve
redhatcve
CVE-2021-46822
2022-06-22 09:36:12
oraclelinux
oraclelinux
libjpeg-turbo security update
2023-03-06 00:00:00
almalinux
almalinux
Moderate: libjpeg-turbo security update
2023-03-06 00:00:00
redhat
redhat
(RHSA-2023:1068) Moderate: libjpeg-turbo security update
2023-03-06 10:50:14
amazon
amazon
Medium: libjpeg-turbo
2023-08-17 11:58:00
ubuntu
ubuntu
libjpeg-turbo vulnerabilities
2022-09-22 00:00:00
cloudfoundry
cloudfoundry
USN-5631-1: libjpeg-turbo vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
ibm
ibm
Security Bulletin: IBM Transform Services for IBM i is vulnerable to denial of service, buffer overflow, and allowing attacker to obtain sensitive information due to multiple vulnerabilities.
2022-11-17 15:02:38

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

22.9%

JSON
Related for MGASA-2022-0353
rocky1cbl_mariner1openvas15nessus21nvd1cvelist1osv4prion1cve1debiancve1ubuntucve1redhatcve1oraclelinux1almalinux1redhat1amazon1ubuntu1cloudfoundry1ibm1