Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.1
CVSSv3

CVE-2020-13790

Published: 03/06/2020 Updated: 07/11/2023
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P
Subscribe to Libjpeg-turbo

Vulnerability Summary

It exists that libjpeg-turbo incorrectly handled certain PPM files. An attacker could possibly use this issue to access sensitive information.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libjpeg-turbo libjpeg-turbo 2.0.4

mozilla mozjpeg 4.0.0

Vendor Advisories

Debian CVElist Bug Report Logs: libjpeg-turbo: CVE-2020-13790
Debian Bug report logs - #962829 libjpeg-turbo: CVE-2020-13790 Package: src:libjpeg-turbo; Maintainer for src:libjpeg-turbo is Ondřej Surý <ondrej@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 14 Jun 2020 19:45:01 UTC Severity: important Tags: security, upstream Found in version lib ...
Ubuntu Security Notice: libjpeg-turbo vulnerability
libjpeg-turbo could be made to expose sensitive information if it received a specially crafted PPM file ...

References

CWE-125https://github.com/libjpeg-turbo/libjpeg-turbo/issues/433https://github.com/libjpeg-turbo/libjpeg-turbo/commit/3de15e0c344d11d4b90f4a47136467053eb2d09ahttps://usn.ubuntu.com/4386-1/https://lists.debian.org/debian-lts-announce/2020/07/msg00033.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00031.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00062.htmlhttps://security.gentoo.org/glsa/202010-03https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P4D6KNUY7YANSPH7SVQ44PJKSABFKAUB/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6563YHSVZK24MPJXGJVK3CQG7JVWZGK/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962829https://usn.ubuntu.com/4386-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook