CVE-2020-17541
Fixed in a distro release EPSS 3%
Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.
Products: libjpeg-turbo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libjpeg-turbo | 1.5.3-12.el8 |
| AlmaLinux 8 | libjpeg-turbo-devel | 1.5.3-12.el8 |
| AlmaLinux 8 | libjpeg-turbo-utils | 1.5.3-12.el8 |
| AlmaLinux 8 | turbojpeg | 1.5.3-12.el8 |
| AlmaLinux 8 | turbojpeg-devel | 1.5.3-12.el8 |
| Amazon Linux 2 | libjpeg-turbo | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | libjpeg-turbo-devel | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | libjpeg-turbo-utils | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | turbojpeg | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | turbojpeg-devel | 2.0.90-2.amzn2.0.6 |
| Debian 12 | libjpeg-turbo | 1:2.0.5-1 |
| Debian 13 | libjpeg-turbo | 1:2.0.5-1 |
| Debian 14 | libjpeg-turbo | 1:2.0.5-1 |
| Red Hat Enterprise Linux 8 | libjpeg-turbo | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | libjpeg-turbo-debuginfo | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | libjpeg-turbo-debugsource | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | libjpeg-turbo-devel | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | libjpeg-turbo-utils | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | libjpeg-turbo-utils-debuginfo | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | turbojpeg | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | turbojpeg-debuginfo | 0:1.5.3-12.el8 |
| Red Hat Enterprise Linux 8 | turbojpeg-devel | 0:1.5.3-12.el8 |
| Rocky Linux 8 | libjpeg-turbo | 0:1.5.3-12.el8 |
| SUSE Linux Enterprise Micro 5.0 | libjpeg-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | libjpeg-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | libjpeg62-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | libjpeg-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | libjpeg62-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 | libjpeg-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP3 | libjpeg-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | libjpeg-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | libjpeg-turbo | 1.5.3-5.18.1 |
| SUSE Linux Enterprise Server 12 SP5 | libjpeg-turbo | 1.5.3-31.25.1 |
| SUSE Linux Enterprise Server 12 SP5 | libjpeg62-turbo | 1.5.3-31.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libjpeg-turbo | 1.5.3-31.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libjpeg62-turbo | 1.5.3-31.25.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libjpeg-turbo | 1.5.3-31.25.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libjpeg62-turbo | 1.5.3-31.25.1 |
| Ubuntu 18.04 LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.6 |
| Ubuntu 20.04 LTS | libjpeg-turbo | 2.0.3-0ubuntu1.20.04.3 |
| Ubuntu Pro 14.04 LTS | libjpeg-turbo | 1.3.0-0ubuntu2.1+esm2 |
| Ubuntu Pro 16.04 LTS | libjpeg-turbo | 1.4.2-0ubuntu3.4+esm1 |
| openSUSE Leap 15.2 | libjpeg-turbo | 1.5.3-lp152.8.6.1 |
| openSUSE Leap 15.2 | libjpeg62-turbo | 1.5.3-lp152.8.6.1 |
| openSUSE Leap 15.3 | libjpeg-turbo | 1.5.3-5.18.1 |
| openSUSE Leap 15.3 | libjpeg62-turbo | 1.5.3-5.18.1 |