libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as
    demonstrated by djpeg. (CVE-2018-19664)

  - The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer
    overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by
    tjbench. (CVE-2018-20330)

An update of the libjpeg package has been released.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4190-1 advisory.

    It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly     use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04     LTS. (CVE-2018-14498)

    It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. An attacker could possibly     use this issue to expose sensitive information. This issue only affected Ubuntu 19.04. (CVE-2018-19664)

    It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly     use this issue to execute arbitrary code. This issue only affected Ubuntu 19.04. (CVE-2018-20330)

    It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. An attacker could possibly     cause a denial of service or execute arbitrary code. (CVE-2019-2201)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2018-19664 and CVE-2018-20330.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for **CVE-2018-20330** and **CVE-2018-19664**

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
424061	Alpine: multiple libjpeg-turbo packages: security update to 2.0.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
424061	Alpine: multiple libjpeg-turbo packages: security update to 2.0.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
203119	Photon OS 2.0: Libjpeg PHSA-2019-2.0-0128	Nessus	PhotonOS Local Security Checks	medium
134211	Photon OS 3.0: Libjpeg PHSA-2020-3.0-0063	Nessus	PhotonOS Local Security Checks	medium
131016	Ubuntu 16.04 LTS / 18.04 LTS : libjpeg-turbo vulnerabilities (USN-4190-1)	Nessus	Ubuntu Local Security Checks	high
121321	Fedora 29 : mingw-libjpeg-turbo (2019-a018522ba3)	Nessus	Fedora Local Security Checks	high
121265	Fedora 29 : libjpeg-turbo (2019-ae92ca8981)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2018-19664

medium

Tenable Plugins

high

high

medium

medium

high

high

high