Patchwire CVEs, their patch status, and feeds to follow them

CVE-2013-6629

Fixed in a distro release EPSS 10%

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

Published 2013-11-15 · CVE record · OSV

Products: google chrome, oracle solaris, artifex gpl_ghostscript, libjpeg-turbo, fedoraproject fedora, opensuse, canonical ubuntu_linux, debian_linux, mozilla firefox, mozilla seamonkey, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Debian 12libjpeg-turbo1.3.0-3
Debian 13libjpeg-turbo1.3.0-3
Debian 14libjpeg-turbo1.3.0-3
Debian 7chromium-browser31.0.1650.57-1~deb7u1
Debian 7openjdk-77u55-2.4.7-1~deb7u1
Red Hat Enterprise Linux 5libjpeg0:6b-38
Red Hat Enterprise Linux 5libjpeg-debuginfo0:6b-38
Red Hat Enterprise Linux 5libjpeg-devel0:6b-38
Red Hat Enterprise Linux 6libjpeg-turbo0:1.2.1-3.el6_5
Red Hat Enterprise Linux 6libjpeg-turbo-debuginfo0:1.2.1-3.el6_5
Red Hat Enterprise Linux 6libjpeg-turbo-devel0:1.2.1-3.el6_5
Red Hat Enterprise Linux 6libjpeg-turbo-static0:1.2.1-3.el6_5
Red Hat network satellite 5.4java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el5
Red Hat network satellite 5.4java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el6
Red Hat network satellite 5.4java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el5
Red Hat network satellite 5.4java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el6
Red Hat network satellite 5.5java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el6
Red Hat network satellite 5.5java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el5
Red Hat network satellite 5.5java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el5
Red Hat network satellite 5.5java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el6
Red Hat network satellite 5.6java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el6
Red Hat network satellite 5.6java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el5
Red Hat network satellite 5.6java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el6
Red Hat network satellite 5.6java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.5.0-ibm-accessibility1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.16.6-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.16.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.7.0-ibm1:1.7.0.7.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.7.0-ibm-demo1:1.7.0.7.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.7.0-ibm-devel1:1.7.0.7.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.7.0-ibm-jdbc1:1.7.0.7.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.7.0-ibm-plugin1:1.7.0.7.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.7.0-ibm-src1:1.7.0.7.0-1jpp.1.el5_10
Red Hat rhel extras 5java-1.7.0-oracle1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras 5java-1.7.0-oracle-devel1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras 5java-1.7.0-oracle-javafx1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras 5java-1.7.0-oracle-jdbc1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras 5java-1.7.0-oracle-plugin1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras 5java-1.7.0-oracle-src1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras 6java-1.5.0-ibm1:1.5.0.16.6-1jpp.1.el6_5
Red Hat rhel extras 6java-1.5.0-ibm-demo1:1.5.0.16.6-1jpp.1.el6_5
Red Hat rhel extras 6java-1.5.0-ibm-devel1:1.5.0.16.6-1jpp.1.el6_5
Red Hat rhel extras 6java-1.5.0-ibm-javacomm1:1.5.0.16.6-1jpp.1.el6_5
Red Hat rhel extras 6java-1.5.0-ibm-jdbc1:1.5.0.16.6-1jpp.1.el6_5
Red Hat rhel extras 6java-1.5.0-ibm-plugin1:1.5.0.16.6-1jpp.1.el6_5
Red Hat rhel extras 6java-1.5.0-ibm-src1:1.5.0.16.6-1jpp.1.el6_5
Red Hat rhel extras 6java-1.6.0-ibm1:1.6.0.16.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.6.0-ibm-demo1:1.6.0.16.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.6.0-ibm-devel1:1.6.0.16.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.6.0-ibm-javacomm1:1.6.0.16.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.6.0-ibm-jdbc1:1.6.0.16.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.6.0-ibm-plugin1:1.6.0.16.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.6.0-ibm-src1:1.6.0.16.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-ibm1:1.7.0.7.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-ibm-demo1:1.7.0.7.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-ibm-devel1:1.7.0.7.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-ibm-jdbc1:1.7.0.7.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-ibm-plugin1:1.7.0.7.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-ibm-src1:1.7.0.7.0-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-oracle1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-oracle-devel1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-oracle-javafx1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-oracle-jdbc1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-oracle-plugin1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras 6java-1.7.0-oracle-src1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras 7java-1.7.1-ibm1:1.7.1.1.0-1jpp.2.el7_0
Red Hat rhel extras 7java-1.7.1-ibm-demo1:1.7.1.1.0-1jpp.2.el7_0
Red Hat rhel extras 7java-1.7.1-ibm-devel1:1.7.1.1.0-1jpp.2.el7_0
Red Hat rhel extras 7java-1.7.1-ibm-jdbc1:1.7.1.1.0-1jpp.2.el7_0
Red Hat rhel extras 7java-1.7.1-ibm-plugin1:1.7.1.1.0-1jpp.2.el7_0
Red Hat rhel extras 7java-1.7.1-ibm-src1:1.7.1.1.0-1jpp.2.el7_0
Red Hat rhel extras oracle java 5java-1.6.0-sun1:1.6.0.75-1jpp.3.el5_10
Red Hat rhel extras oracle java 5java-1.6.0-sun-demo1:1.6.0.75-1jpp.3.el5_10
Red Hat rhel extras oracle java 5java-1.6.0-sun-devel1:1.6.0.75-1jpp.3.el5_10
Red Hat rhel extras oracle java 5java-1.6.0-sun-jdbc1:1.6.0.75-1jpp.3.el5_10
Red Hat rhel extras oracle java 5java-1.6.0-sun-plugin1:1.6.0.75-1jpp.3.el5_10
Red Hat rhel extras oracle java 5java-1.6.0-sun-src1:1.6.0.75-1jpp.3.el5_10
Red Hat rhel extras oracle java 5java-1.7.0-oracle1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras oracle java 5java-1.7.0-oracle-devel1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras oracle java 5java-1.7.0-oracle-javafx1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras oracle java 5java-1.7.0-oracle-jdbc1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras oracle java 5java-1.7.0-oracle-plugin1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras oracle java 5java-1.7.0-oracle-src1:1.7.0.55-1jpp.2.el5_10
Red Hat rhel extras oracle java 6java-1.6.0-sun1:1.6.0.75-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.6.0-sun-demo1:1.6.0.75-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.6.0-sun-devel1:1.6.0.75-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.6.0-sun-jdbc1:1.6.0.75-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.6.0-sun-plugin1:1.6.0.75-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.6.0-sun-src1:1.6.0.75-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.7.0-oracle1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.7.0-oracle-devel1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.7.0-oracle-javafx1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.7.0-oracle-jdbc1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.7.0-oracle-plugin1:1.7.0.55-1jpp.1.el6_5
Red Hat rhel extras oracle java 6java-1.7.0-oracle-src1:1.7.0.55-1jpp.1.el6_5
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedchromium113.0.5672.92-1.1
openSUSE Tumbleweedchromium55.0.2883.75-3.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1
openSUSE Tumbleweedjava-1_7_0-openjdk1.7.0.121-1.1