Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-13790

Fixed in a distro release EPSS 3%

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

Published 2020-06-03 · CVE record · OSV

Products: libjpeg-turbo, mozilla mozjpeg

Distro releases

ReleasePackageFixed in
AlmaLinux 8libjpeg-turbo1.5.3-14.el8_10
AlmaLinux 8libjpeg-turbo-devel1.5.3-14.el8_10
AlmaLinux 8libjpeg-turbo-utils1.5.3-14.el8_10
AlmaLinux 8turbojpeg1.5.3-14.el8_10
AlmaLinux 8turbojpeg-devel1.5.3-14.el8_10
Alpine 3.10libjpeg-turbo2.0.4-r1
Alpine 3.11libjpeg-turbo2.0.4-r1
Alpine 3.12libjpeg-turbo2.0.4-r2
Alpine 3.13libjpeg-turbo2.0.4-r2
Alpine 3.14libjpeg-turbo2.0.4-r2
Alpine 3.15libjpeg-turbo2.0.4-r2
Alpine 3.16libjpeg-turbo2.0.4-r2
Alpine 3.17libjpeg-turbo2.0.4-r2
Alpine 3.18libjpeg-turbo2.0.4-r2
Alpine 3.19libjpeg-turbo2.0.4-r2
Alpine 3.20libjpeg-turbo2.0.4-r2
Alpine 3.21libjpeg-turbo2.0.4-r2
Alpine 3.22libjpeg-turbo2.0.4-r2
Alpine 3.23libjpeg-turbo2.0.4-r2
Alpine 3.24libjpeg-turbo2.0.4-r2
Debian 12libjpeg-turbo1:2.0.5-1
Debian 13libjpeg-turbo1:2.0.5-1
Debian 14libjpeg-turbo1:2.0.5-1
Debian 9libjpeg-turbo1:1.5.1-2+deb9u1
Red Hat Enterprise Linux 8libjpeg-turbo0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8libjpeg-turbo-debuginfo0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8libjpeg-turbo-debugsource0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8libjpeg-turbo-devel0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8libjpeg-turbo-utils0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8libjpeg-turbo-utils-debuginfo0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8turbojpeg0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8turbojpeg-debuginfo0:1.5.3-14.el8_10
Red Hat Enterprise Linux 8turbojpeg-devel0:1.5.3-14.el8_10
Rocky Linux 8libjpeg-turbo0:1.5.3-14.el8_10
SUSE Linux Enterprise Module for Basesystem 15 SP1libjpeg-turbo1.5.3-5.15.7
SUSE Linux Enterprise Module for Basesystem 15 SP1libjpeg62-turbo1.5.3-5.15.7
SUSE Linux Enterprise Module for Basesystem 15 SP2libjpeg-turbo1.5.3-5.15.7
SUSE Linux Enterprise Module for Basesystem 15 SP2libjpeg62-turbo1.5.3-5.15.7
SUSE Linux Enterprise Module for Desktop Applications 15 SP1libjpeg-turbo1.5.3-5.15.7
SUSE Linux Enterprise Module for Desktop Applications 15 SP2libjpeg-turbo1.5.3-5.15.7
SUSE Linux Enterprise Module for Package Hub 15 SP1libjpeg-turbo1.5.3-5.15.7
SUSE Linux Enterprise Module for Package Hub 15 SP2libjpeg-turbo1.5.3-5.15.7
SUSE Linux Enterprise Server 12 SP5libjpeg-turbo1.5.3-31.22.2
SUSE Linux Enterprise Server 12 SP5libjpeg62-turbo1.5.3-31.22.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5libjpeg-turbo1.5.3-31.22.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5libjpeg62-turbo1.5.3-31.22.2
SUSE Linux Enterprise Software Development Kit 12 SP5libjpeg-turbo1.5.3-31.22.2
SUSE Linux Enterprise Software Development Kit 12 SP5libjpeg62-turbo1.5.3-31.22.2
Ubuntu 16.04 LTSlibjpeg-turbo1.4.2-0ubuntu3.4
Ubuntu 18.04 LTSlibjpeg-turbo1.5.2-0ubuntu5.18.04.4
Ubuntu 20.04 LTSlibjpeg-turbo2.0.3-0ubuntu1.20.04.1
Ubuntu Pro 14.04 LTSlibjpeg-turbo1.3.0-0ubuntu2.1+esm1
openSUSE Leap 15.1libjpeg-turbo1.5.3-lp151.6.6.1
openSUSE Leap 15.1libjpeg62-turbo1.5.3-lp151.6.6.1
openSUSE Leap 15.2libjpeg-turbo1.5.3-lp152.8.3.1
openSUSE Leap 15.2libjpeg62-turbo1.5.3-lp152.8.3.1
openSUSE Tumbleweedlibjpeg-turbo8.2.2-65.2