Stay Secure with the Latest Linux Advisories

security advisoryDoSUbuntu

Ubuntu 14.04 ESM USN-5497-1 Critical: Libjpeg6b DoS Threats

Several security issues were fixed in Libjpeg6b.. =========================================================================Ubuntu Security Notice USN-5497-1 June 30, 2022 libjpeg6b vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM Summary: Several security issues were fixed in Libjpeg6b. Software Description: - libjpeg6b: library for handling JPEG files Details: It was discovered that Libjpeg6b was not properly performing bounds checks when compressing PPM and Targa image files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-11212) Chijin Zhou discovered that Libjpeg6b was incorrectly handling the EOF character in input data when generating JPEG files. An attacker could possibly use this issue to force the execution of a large loop, force excessive memory consumption, and cause a denial of service. (CVE-2018-11813) Sheng Shu and Dongdong She discovered that Libjpeg6b was not properly limiting the amount of memory being used when it was performing decompression or multi-pass compression operations. An attacker could possibly use this issue to force excessive memory consumption and cause a denial of service. (CVE-2020-14152) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: libjpeg62 6b1-4ubuntu1+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5497-1 CVE-2018-11212, CVE-2018-11213, CVE-2018-11214, CVE-2018-11813, CVE-2020-14152 . Debian Security Notice DSN-3123-1 relates to Libpng vulnerabilities, improving defense against possible service disruption threats.. Libjpeg6b Security Notice, Ubuntu 14.04 ESM, Security Updates. . Severity: Critical. LinuxSecurity.com Team

Jun 30, 2022 •Critical Ubuntu