CVE-2020-14152
CVE-2020-14152
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
CVSS 7.1 · High · EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libjpeg-turbo Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.5.2-1
Update to 1:1.5.2-1
libjpeg-turbo Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.5.2-1
Update to 1:1.5.2-1
libjpeg-turbo Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.5.2-1
Update to 1:1.5.2-1
libjpeg-turbo Ubuntu:Pro:14.04:LTS
- Versions
- 1.3.0-0ubuntu1
- 1.3.0-0ubuntu2
- 1.3.0-0ubuntu2.1
- 1.3.0-0ubuntu2.1+esm1
- Affected ranges
- ECOSYSTEM: < 1.3.0-0ubuntu2.1+esm2
Update to 1.3.0-0ubuntu2.1+esm2
libjpeg6b Ubuntu:Pro:14.04:LTS
- Versions
- 6b1-3ubuntu1
- 6b1-4ubuntu1
- Affected ranges
- ECOSYSTEM: < 6b1-4ubuntu1+esm1
Update to 6b1-4ubuntu1+esm1
libjpeg-turbo Ubuntu:Pro:16.04:LTS
- Versions
- 1.3.0-0ubuntu2
- 1.4.2-0ubuntu1
- 1.4.2-0ubuntu2
- 1.4.2-0ubuntu3
- 1.4.2-0ubuntu3.1
- 1.4.2-0ubuntu3.3
- 1.4.2-0ubuntu3.4
- Affected ranges
- ECOSYSTEM: < 1.4.2-0ubuntu3.4+esm1
Update to 1.4.2-0ubuntu3.4+esm1
libjpeg6b Ubuntu:Pro:16.04:LTS
- Versions
- 1:6b2-2
- Affected ranges
- ECOSYSTEM: < 1:6b2-2ubuntu0.1~esm1
Update to 1:6b2-2ubuntu0.1~esm1
libjpeg9 Ubuntu:Pro:16.04:LTS
- Versions
- 1:9a-2ubuntu1
- 1:9b-1
- 1:9b-1ubuntu1
- Affected ranges
- ECOSYSTEM: < 1:9b-1ubuntu1+esm1
Update to 1:9b-1ubuntu1+esm1
libjpeg6b Ubuntu:18.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:18.04:LTS
- Versions
- 1:9b-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:20.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:22.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:24.04:LTS
- Versions
- 1:6b2-3.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:25.10
- Versions
- 1:6b2-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:26.10
- Versions
- 1:6b2-4build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:26.04:LTS
- Versions
- 1:6b2-4
- 1:6b2-4build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published