Your submission was sent successfully! Close

CVE-2016-3616

Published: 13 February 2017

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.

Priority

Low

CVSS 3 base score: 8.8

Status

Package Release Status
libjpeg-turbo
Launchpad, Ubuntu, Debian
artful Not vulnerable
(1.5.1-0ubuntu1)
bionic Not vulnerable
(1.5.1-0ubuntu1)
cosmic Not vulnerable
(1.5.1-0ubuntu1)
disco Not vulnerable
(1.5.1-0ubuntu1)
eoan Not vulnerable
(1.5.1-0ubuntu1)
focal Not vulnerable
(1.5.1-0ubuntu1)
groovy Not vulnerable
(1.5.1-0ubuntu1)
hirsute Not vulnerable
(1.5.1-0ubuntu1)
impish Not vulnerable
(1.5.1-0ubuntu1)
jammy Not vulnerable
(1.5.1-0ubuntu1)
precise
Released (1.1.90+svn733-0ubuntu4.5)
trusty
Released (1.3.0-0ubuntu2.1)
upstream
Released (1.4.2)
wily Ignored
(reached end-of-life)
xenial Not vulnerable
(1.4.2-0ubuntu3)
yakkety Not vulnerable
(1.5.0-0ubuntu1)
zesty Not vulnerable
(1.5.1-0ubuntu1)
Patches:
upstream: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/6709e4a0cfa44d4f54ee8ad05753d4aa9260cb91
libjpeg6b
Launchpad, Ubuntu, Debian
artful Not vulnerable

bionic Not vulnerable

cosmic Not vulnerable

disco Not vulnerable

eoan Not vulnerable

focal Not vulnerable

groovy Not vulnerable

hirsute Not vulnerable

impish Not vulnerable

jammy Not vulnerable

precise Does not exist
(precise was not-affected)
trusty Not vulnerable

upstream Needs triage

wily Not vulnerable

xenial Not vulnerable

yakkety Not vulnerable

zesty Not vulnerable

libjpeg9
Launchpad, Ubuntu, Debian
artful Ignored
(reached end-of-life)
bionic
Released (1:9b-2)
cosmic Not vulnerable
(1:9b-2)
disco Not vulnerable
(1:9b-2)
eoan Not vulnerable
(1:9b-2)
focal Not vulnerable
(1:9b-2)
groovy Not vulnerable
(1:9b-2)
hirsute Not vulnerable
(1:9b-2)
impish Not vulnerable
(1:9b-2)
jammy Not vulnerable
(1:9b-2)
precise Does not exist

trusty Does not exist

upstream Needs triage

wily Does not exist

xenial Ignored
(end of standard support, was needed)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)