CVE-2014-9092
Fixed in a distro release EPSS 3%
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.
Products: libjpeg-turbo, fedoraproject fedora, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libjpeg-turbo | 1:1.3.1-11 |
| Debian 13 | libjpeg-turbo | 1:1.3.1-11 |
| Debian 14 | libjpeg-turbo | 1:1.3.1-11 |
| Ubuntu 14.04 LTS | libjpeg-turbo | 1.3.0-0ubuntu2.1 |
| Ubuntu 16.04 LTS | libjpeg-turbo | 1.4.2-0ubuntu3.1 |
| Ubuntu 18.04 LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.1 |
| openSUSE Tumbleweed | libjpeg-turbo | 8.1.2-40.2 |