Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:10853
HistoryJan 15, 2019 - 8:53 a.m.

Information Disclosure

2019-01-1508:53:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.003

Percentile

68.6%

JSON

libjpeg-turbo is vulnerable to information disclosure attacks. The vulnerability exists due to the get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

References

Related

nessus 62
openvas 45
mscve 1
mskb 10
f5 2
symantec 1
slackware 1
debiancve 1
nvd 1
kaspersky 3
redhat 4
cvelist 1
ubuntucve 1
oraclelinux 2
prion 1
centos 2
cve 1
mageia 2
mozilla 1
fedora 6
veracode 23
securityvulns 6
gentoo 1
ubuntu 3
amazon 1
ibm 7
freebsd 2
chrome 1
threatpost 1
suse 3
osv 1
debian 2
nessus
nessus
F5 Networks BIG-IP : libjpeg vulnerability (K59503294)
2016-05-24 00:00:00
KB4017094: Security Update for the libjpeg Information Disclosure Vulnerability for Microsoft Silverlight 5 (April 2017)
2017-04-11 00:00:00
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : libjpeg (SSA:2013-350-02)
2013-12-17 00:00:00
openvas
openvas
Microsoft Windows 'libjpeg' Information Disclosure Vulnerability (KB4014794)
2017-04-12 00:00:00
RedHat Update for libjpeg RHSA-2013:1804-01
2013-12-17 00:00:00
Microsoft Windows libjpeg Information Disclosure Vulnerability (KB4014652)
2017-04-12 00:00:00
mscve
mscve
libjpeg Information Disclosure Vulnerability
2017-04-11 07:00:00
mskb
mskb
Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017
2017-04-11 07:00:00
Security update for the libjpeg information disclosure vulnerability for Microsoft Silverlight 5: April 11, 2017
2017-04-11 07:00:00
Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017
2017-04-11 07:00:00
f5
f5
SOL59503294 - libjpeg vulnerability CVE-2013-6629
2016-02-19 00:00:00
K59503294 : libjpeg vulnerability CVE-2013-6629
2016-02-19 00:00:00
symantec
symantec
libjpeg/libjpeg-turbo Library CVE-2013-6629 Memory Corruption Vulnerability
2013-11-12 00:00:00
slackware
slackware
[slackware-security] libjpeg
2013-12-17 03:49:12
debiancve
debiancve
CVE-2013-6629
2013-11-19 04:50:56
nvd
nvd
CVE-2013-6629
2013-11-19 04:50:56
kaspersky
kaspersky
KLA11061 Information disclosure vulnerability in Microsoft Windows
2017-04-11 00:00:00
KLA11835 Multiple vulnerabilities in Microsoft Products (ESU)
2017-04-11 00:00:00
KLA11059 Multiple vulnerabilities in Microsoft Windows
2017-04-11 00:00:00
redhat
redhat
(RHSA-2013:1804) Moderate: libjpeg security update
2013-12-09 00:00:00
(RHSA-2013:1803) Moderate: libjpeg-turbo security update
2013-12-09 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
cvelist
cvelist
CVE-2013-6629
2013-11-15 20:00:00
ubuntucve
ubuntucve
CVE-2013-6629
2013-11-18 00:00:00
oraclelinux
oraclelinux
libjpeg security update
2013-12-09 00:00:00
libjpeg-turbo security update
2013-12-09 00:00:00
prion
prion
Design/Logic Flaw
2013-11-19 04:50:00
centos
centos
libjpeg security update
2013-12-10 00:47:48
libjpeg security update
2013-12-10 01:01:49
cve
cve
CVE-2013-6629
2013-11-19 04:50:56
mageia
mageia
Updated libjpeg packages fix vulnerabilities in libjpeg-turbo
2013-11-21 00:31:46
Updated chromium-browser-stable packages fix multiple vulnerabilities
2013-11-13 23:09:45
mozilla
mozilla
JPEG information leak — Mozilla
2013-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mingw-libjpeg-turbo-1.3.1-1.fc20
2014-06-10 03:09:55
[SECURITY] Fedora 19 Update: mingw-libjpeg-turbo-1.3.1-1.fc19
2014-06-10 03:13:25
[SECURITY] Fedora 19 Update: libjpeg-turbo-1.2.90-3.fc19
2014-01-10 07:56:56
veracode
veracode
Sensitive Information Disclosure
2019-05-02 05:00:31
Privilege Escalation
2019-05-02 04:58:06
Privilege Escalation
2019-05-02 04:58:06
securityvulns
securityvulns
bugs in IJG jpeg6b & libjpeg-turbo
2013-12-09 00:00:00
libjpeg multiple security vulnerabilities
2013-12-09 00:00:00
[ MDVSA-2013:274 ] libjpeg
2013-11-26 00:00:00
gentoo
gentoo
libjpeg-turbo: Multiple vulnerabilities
2016-06-05 00:00:00
ubuntu
ubuntu
libjpeg, libjpeg-turbo vulnerabilities
2013-12-19 00:00:00
Thunderbird vulnerabilities
2013-12-11 00:00:00
Firefox vulnerabilities
2013-12-11 00:00:00
amazon
amazon
Medium: libjpeg-turbo
2013-12-17 21:32:00
ibm
ibm
Security Bulletin: Security vulnerability in IBM Jazz Team Server affects multiple IBM Rational products based on IBM Jazz technology (CVE-2014-2421, CVE-2013-6954, CVE-2013-6629, CVE-2014-0411, CVE-2014-0416)
2021-04-28 18:35:50
Security Bulletin: SiteProtector System can be affected by several vulnerabilities in the IBM Java Runtime Environment (CVE-2013-6954, CVE-2013-6629, CVE-2014-2421, CVE-2014-0453, CVE-2014-1876, CVE-2014-4244, CVE-2014-4263) and in Tomcat (CVE-2014-0075)
2018-06-16 21:19:16
Security Bulletin: Multiple vulnerabilities in IBM SDK for Java included with IBM Forms Viewer
2018-06-16 19:52:50
freebsd
freebsd
chromium -- multiple vulnerabilities
2013-11-12 00:00:00
mozilla -- multiple vulnerabilities
2013-12-09 00:00:00
chrome
chrome
Stable Channel Update
2013-11-12 00:00:00
threatpost
threatpost
12 Flaws Fixed in Google Chrome
2013-11-12 13:17:53
suse
suse
chromium: update to 31.0.1650.57 (important)
2013-11-27 20:04:35
Mozilla updates 2013/12 (important)
2013-12-13 15:04:36
chromium: 31.0.1650.57 version update (important)
2013-11-27 20:04:13
osv
osv
chromium-browser - several
2013-11-16 00:00:00
debian
debian
[SECURITY] [DSA 2797-1] chromium-browser security update
2013-11-17 15:42:38
[SECURITY] [DSA 2797-1] chromium-browser security update
2013-11-17 15:42:38

EPSS

0.003

Percentile

68.6%

JSON
Related for VERACODE:10853
nessus62openvas45mscve1mskb10f52symantec1slackware1debiancve1nvd1kaspersky3redhat4cvelist1ubuntucve1oraclelinux2prion1centos2cve1mageia2mozilla1fedora6veracode23securityvulns6gentoo1ubuntu3amazon1ibm7freebsd2chrome1threatpost1suse3osv1debian2