CVE-2020-17541: libjpeg-turbo Out-of-bounds Write
CVSS: 8.8v3.1HighModified
AliasesSUSE-SU-2021:1957-1SUSE-SU-2021:1958-1RHSA-2021:4288UBUNTU-CVE-2020-17541DEBIAN-CVE-2020-17541openSUSE-SU-2021:0892-1openSUSE-SU-2021:1958-1
Published 01-06-2021Last modified 04-08-2024
Vulnerability summary
CVE-2020-17541 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in libjpeg-turbo. EPSS estimates a 2.73% chance of exploitation in the next 30 days, higher than 85.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
8.8/10
010
High · v3.1 (NVD)EPSS score
2.73%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 01-06-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.
CVSS metrics
5 scores · 4 sources · 2 versionsHigh 8.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · Red hatEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
2.73%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.73% on 19-09-2026
19-09-202619-10-2026
EPSS score2.73%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundLibjpeg Turbo
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Suse15 products
- libjpeg-turbo&distro=SUSE Linux Enterprise Micro 5.0< 1.5.3-5.18.1
- libjpeg-turbo&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2< 1.5.3-5.18.1
- libjpeg-turbo&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3< 1.5.3-5.18.1
- libjpeg-turbo&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP2< 1.5.3-5.18.1
- libjpeg-turbo&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP3< 1.5.3-5.18.1
Redhat9 products
- libjpeg-turbo< 0:1.5.3-12.el8
- libjpeg-turbo-debuginfo< 0:1.5.3-12.el8
- libjpeg-turbo-debugsource< 0:1.5.3-12.el8
- libjpeg-turbo-devel< 0:1.5.3-12.el8
- libjpeg-turbo-utils< 0:1.5.3-12.el8
Opensuse4 products
- libjpeg-turbo&distro=openSUSE Leap 15.2< 1.5.3-lp152.8.6.1
- libjpeg-turbo&distro=openSUSE Leap 15.3< 1.5.3-5.18.1
- libjpeg62-turbo&distro=openSUSE Leap 15.2< 1.5.3-lp152.8.6.1
- libjpeg62-turbo&distro=openSUSE Leap 15.3< 1.5.3-5.18.1
Debian1 product
- libjpeg-turbo< 1:2.0.5-1
Libjpeg-turbo1 product
- libjpeg-turbo< 2.0.4
Ubuntu1 product
- libjpeg-turbo< 1.3.0-0ubuntu2.1+esm2 | < 1.4.2-0ubuntu3.4+esm1 | < 1.5.2-0ubuntu5.18.04.6 | < 2.0.3-0ubuntu1.20.04.3
6 vendors · 31 products
References
21 links- github.com/libjpeg-turbo/libjpeg-turbo/issues/392X Refsource MISCExploitIssue TrackingPatchThird Party Advisory
Show all 21 references
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory