Base Score

MEDIUM6.5

CVE-2014-9092

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.

VectorNETWORK

Published Bycve@mitre.org

Published DateOct 10, 2017, 13:29

Weakness Type (CWE):CWE-119

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147315.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147336.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150957.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150967.html
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26482&sid=81658bc2f51a8d9893279cd01e83783f
http://www.openwall.com/lists/oss-security/2014/11/26/8
http://www.securityfocus.com/bid/71326
https://bugzilla.redhat.com/show_bug.cgi?id=1169845
https://tapani.tarvainen.info/linux/convertbug/
https://usn.ubuntu.com/3706-1/
https://usn.ubuntu.com/3706-2/

Base Score

MEDIUM6.5

Weakness Type (CWE):CWE-119

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH