https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:06:25 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:3705 <p><strong>Affected:</strong> AlmaLinux:8: turbojpeg-devel</p> <p>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.</p> <p>Security Fix(es):</p> <p>* libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service (CVE-2018-14498)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: turbojpeg-devel</p> <p>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.</p> <p>Security Fix(es):</p> <p>* libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service (CVE-2018-14498)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:3705 https://cve.radiocsirt.org/vuln/bdu:2021-01309 bdu:2021-01309 https://cve.radiocsirt.org/vuln/bdu:2021-01309 https://cve.radiocsirt.org/vuln/bell-cve-2018-14498 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-14498 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-67079 EUVD-2026-67079 https://cve.radiocsirt.org/vuln/euvd-2026-67079 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14498 <p>get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.</p> <p>get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-14498 https://cve.radiocsirt.org/vuln/ghsa-jg8v-w7gx-4g68 <p>get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.</p> <p>get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.</p> https://cve.radiocsirt.org/vuln/ghsa-jg8v-w7gx-4g68 https://cve.radiocsirt.org/vuln/gsd-2018-14498 gsd-2018-14498 https://cve.radiocsirt.org/vuln/gsd-2018-14498 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1118-1 <p>Security update for libjpeg-turbo</p> <p>Security update for libjpeg-turbo</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1118-1 https://cve.radiocsirt.org/vuln/suse-su-2019:0711-1 <p>Security update for libjpeg-turbo</p> <p>Security update for libjpeg-turbo</p> https://cve.radiocsirt.org/vuln/suse-su-2019:0711-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14498 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libjpeg-turbo, Ubuntu:16.04:LTS: libjpeg-turbo, Ubuntu:18.04:LTS: libjpeg-turbo</p> <p>get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libjpeg-turbo, Ubuntu:16.04:LTS: libjpeg-turbo, Ubuntu:18.04:LTS: libjpeg-turbo</p> <p>get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14498 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517