WID-SEC-W-2025-1020

DeutschShown in its original language — a full translation is planned for a future version.

Red Hat Enterprise Linux (libjpeg-turbo): Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen

view advisory published 2025-05-13

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (libjpeg-turbo) ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-13790US	high8.1	3.18% (88th)	—	2020-06-03
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

references

External citations — patches, advisories, analysis.

Red Hat Security Advisory RHSA-2025:7540 vom 2025-05-13external
Red Hat Security Advisory RHSA-2025:8221 vom 2025-05-27external
Oracle Linux Security Advisory ELSA-2025-7540 vom 2025-05-16external
WID-SEC-W-2025-1020 - CSAF Versionself
WID-SEC-2025-1020 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan