CVE-2016-3616
libjpeg9: The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and appli...
CVE-2016-3616 is fixed in 2 products on 1 platform, first by libjpeg-progs 1:9b-2, released February 12, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0422
91st percentile
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libjpeg-progs · Ubuntu 18.04.6 LTS (bionic) | 1:9b-2 | libjpeg-progs 1:9b-2 | Feb 12, 2017 |
| libjpeg9 · Ubuntu 18.04.6 LTS (bionic) | 1:9b-2 | libjpeg9 1:9b-2 | Feb 12, 2017 |