USN-4190-1: libjpeg-turbo vulnerabilities

Published Nov 13, 2019

Updated

It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-14498) It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 19.04. (CVE-2018-19664) It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 19.04. (CVE-2018-20330) It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. An attacker could possibly cause a denial of service or execute arbitrary code. (CVE-2019-2201)

Affected Software

1 affected component

Libjpeg-turbo Libjpeg-turbo

Event History

May 10, 2025

Advisory Published

via Ubuntu·03:55 AM

Data Sourced

via Ubuntu·03:55 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID of this advisory?

The vulnerability ID of this advisory is USN-4190-1.

What software is affected by this vulnerability?

The libjpeg-turbo8 package is affected by this vulnerability.

How can the vulnerability be exploited?

An attacker could exploit this vulnerability to expose sensitive information.

Which versions of Ubuntu are affected?

Ubuntu 16.04 LTS and Ubuntu 18.04 LTS are affected.

How can I fix this vulnerability?

You can fix this vulnerability by updating the libjpeg-turbo8 package to version 2.0.1-0ubuntu2.2 (for Ubuntu 16.04 LTS), version 1.5.2-0ubuntu5.18.04.3 (for Ubuntu 18.04 LTS), or version 2.0.1-0ubuntu2.2 (for Ubuntu 19.04).