CVE-2017-15232
Fixed in a distro release EPSS 2%
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
Products: libjpeg-turbo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.5 | libjpeg-turbo | 1.5.3-r0 |
| Alpine 3.6 | libjpeg-turbo | 1.5.3-r0 |
| Alpine 3.7 | libjpeg-turbo | 1.5.3-r0 |
| Debian 12 | libjpeg-turbo | 1:2.0.5-1 |
| Debian 13 | libjpeg-turbo | 1:2.0.5-1 |
| Debian 14 | libjpeg-turbo | 1:2.0.5-1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Desktop 12 SP2 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Desktop 12 SP3 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Desktop 12 SP3 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server 11 SP4 | jpeg | 6b-879.12.7.1 |
| SUSE Linux Enterprise Server 12 SP2 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server 12 SP2 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server 12 SP3 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server 12 SP3 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | jpeg | 6b-879.12.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | jpeg | 6b-879.12.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libjpeg62-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libjpeg-turbo | 1.5.3-31.7.4 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libjpeg62-turbo | 1.5.3-31.7.4 |
| Ubuntu 14.04 LTS | libjpeg-turbo | 1.3.0-0ubuntu2.1 |
| Ubuntu 16.04 LTS | libjpeg-turbo | 1.4.2-0ubuntu3.1 |
| Ubuntu 18.04 LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.1 |
| openSUSE Tumbleweed | libjpeg-turbo | 8.2.2-65.2 |