CVE-2020-17541
Description
Libjpeg-turbo all version have a stack-based buffer overflow in the transform component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.
Risk Information
Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.316
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg-turbo-1.5.3-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg-turbo-debuginfo-1.5.3-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg-turbo-debugsource-1.5.3-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg62-62.2.0-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg62-32bit-62.2.0-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg62-debuginfo-62.2.0-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg62-debuginfo-32bit-62.2.0-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg62-turbo-1.5.3-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg62-turbo-debugsource-1.5.3-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg8-8.1.2-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg8-32bit-8.1.2-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg8-debuginfo-8.1.2-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libjpeg8-debuginfo-32bit-8.1.2-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libturbojpeg0-8.1.2-31.25.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1957-1(SUSE Linux Enterprise Server 12-SP5 ) libturbojpeg0-debuginfo-8.1.2-31.25.1.x86_64.rpm | Linux |
| library for handling JPEG files (USN-5631-1) libturbojpeg_1.5.2-0ubuntu5.18.04.6_i386.deb | Linux |
| library for handling JPEG files (USN-5631-1) libturbojpeg_1.5.2-0ubuntu5.18.04.6_amd64.deb | Linux |
| library for handling JPEG files (USN-5631-1) libturbojpeg_2.0.3-0ubuntu1.20.04.3_i386.deb | Linux |
| library for handling JPEG files (USN-5631-1) libturbojpeg_2.0.3-0ubuntu1.20.04.3_amd64.deb | Linux |
| library for handling JPEG files (USN-5631-1) libjpeg-turbo8_1.5.2-0ubuntu5.18.04.6_i386.deb | Linux |
| library for handling JPEG files (USN-5631-1) libjpeg-turbo8_1.5.2-0ubuntu5.18.04.6_amd64.deb | Linux |
| library for handling JPEG files (USN-5631-1) libjpeg-turbo8_2.0.3-0ubuntu1.20.04.3_i386.deb | Linux |
| library for handling JPEG files (USN-5631-1) libjpeg-turbo8_2.0.3-0ubuntu1.20.04.3_amd64.deb | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-1.5.3-12.el8.i686.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-1.5.3-12.el8.x86_64.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-debuginfo-1.5.3-12.el8.i686.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-debuginfo-1.5.3-12.el8.x86_64.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-debugsource-1.5.3-12.el8.i686.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-debugsource-1.5.3-12.el8.x86_64.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-devel-1.5.3-12.el8.i686.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-devel-1.5.3-12.el8.x86_64.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-utils-1.5.3-12.el8.x86_64.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-utils-debuginfo-1.5.3-12.el8.i686.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update libjpeg-turbo-utils-debuginfo-1.5.3-12.el8.x86_64.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update turbojpeg-1.5.3-12.el8.i686.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update turbojpeg-1.5.3-12.el8.x86_64.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update turbojpeg-debuginfo-1.5.3-12.el8.i686.rpm | Linux |
| (RHSA-2021:4288)Moderate: security and bug fix update turbojpeg-debuginfo-1.5.3-12.el8.x86_64.rpm | Linux |
| libjpeg-turbo security and bug fix update (RLSA-2021:4288) turbojpeg-1.5.3-12.el8.i686.rpm | Linux |
| libjpeg-turbo security and bug fix update (RLSA-2021:4288) turbojpeg-1.5.3-12.el8.x86_64.rpm | Linux |
| libjpeg-turbo security and bug fix update (RLSA-2021:4288) libjpeg-turbo-1.5.3-12.el8.i686.rpm | Linux |
| libjpeg-turbo security and bug fix update (RLSA-2021:4288) libjpeg-turbo-1.5.3-12.el8.x86_64.rpm | Linux |
| libjpeg-turbo security and bug fix update (RLSA-2021:4288) libjpeg-turbo-devel-1.5.3-12.el8.i686.rpm | Linux |
| libjpeg-turbo security and bug fix update (RLSA-2021:4288) libjpeg-turbo-devel-1.5.3-12.el8.x86_64.rpm | Linux |
| libjpeg-turbo security and bug fix update (RLSA-2021:4288) libjpeg-turbo-utils-1.5.3-12.el8.x86_64.rpm | Linux |
| Libjpeg-turbo update (ELSA-2021-4288) libjpeg-turbo-1.5.3-12.el8.i686.rpm | Linux |
| Libjpeg-turbo update (ELSA-2021-4288) libjpeg-turbo-1.5.3-12.el8.x86_64.rpm | Linux |
| Libjpeg-turbo-devel update (ELSA-2021-4288) libjpeg-turbo-devel-1.5.3-12.el8.i686.rpm | Linux |
| Libjpeg-turbo-devel update (ELSA-2021-4288) libjpeg-turbo-devel-1.5.3-12.el8.x86_64.rpm | Linux |
| Libjpeg-turbo-utils update (ELSA-2021-4288) libjpeg-turbo-utils-1.5.3-12.el8.x86_64.rpm | Linux |
| Turbojpeg update (ELSA-2021-4288) turbojpeg-1.5.3-12.el8.i686.rpm | Linux |
| Turbojpeg update (ELSA-2021-4288) turbojpeg-1.5.3-12.el8.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS-2023-2254) turbojpeg-2.0.90-2.amzn2.0.6.i686.rpm | Linux |
| libjpeg-turbo Security Update (ALAS-2023-2254) turbojpeg-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS-2023-2254) libjpeg-turbo-2.0.90-2.amzn2.0.6.i686.rpm | Linux |
| libjpeg-turbo Security Update (ALAS-2023-2254) libjpeg-turbo-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS-2023-2254) turbojpeg-devel-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS-2023-2254) libjpeg-turbo-devel-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS-2023-2254) libjpeg-turbo-utils-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| Moderate: libjpeg-turbo security and bug fix update turbojpeg-1.5.3-12.el8.i686.rpm | Linux |
| Moderate: libjpeg-turbo security and bug fix update turbojpeg-1.5.3-12.el8.x86_64.rpm | Linux |
| Moderate: libjpeg-turbo security and bug fix update libjpeg-turbo-1.5.3-12.el8.i686.rpm | Linux |
| Moderate: libjpeg-turbo security and bug fix update libjpeg-turbo-1.5.3-12.el8.x86_64.rpm | Linux |
| Moderate: libjpeg-turbo security and bug fix update libjpeg-turbo-devel-1.5.3-12.el8.i686.rpm | Linux |
| Moderate: libjpeg-turbo security and bug fix update libjpeg-turbo-devel-1.5.3-12.el8.x86_64.rpm | Linux |
| Moderate: libjpeg-turbo security and bug fix update libjpeg-turbo-utils-1.5.3-12.el8.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS2-2023-2254) turbojpeg-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS2-2023-2254) turbojpeg-2.0.90-2.amzn2.0.6.i686.rpm | Linux |
| libjpeg-turbo Security Update (ALAS2-2023-2254) turbojpeg-devel-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS2-2023-2254) libjpeg-turbo-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS2-2023-2254) libjpeg-turbo-2.0.90-2.amzn2.0.6.i686.rpm | Linux |
| libjpeg-turbo Security Update (ALAS2-2023-2254) libjpeg-turbo-devel-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| libjpeg-turbo Security Update (ALAS2-2023-2254) libjpeg-turbo-utils-2.0.90-2.amzn2.0.6.x86_64.rpm | Linux |
| Out-of-bounds Write Vulnerability (CVE-2020-17541) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234