MGASA-2014-0174

    Dashboard / Vulnerabilities / MGASA-2014-0174

    MGASA-2014-0174

    Published: 15 Apr 2014Last Modified: 16 Apr 2026
    Upstream:
    CVE-2013-6369

    Summary: Updated jbigkit packages fix CVE-2013-6369

    Details: Updated jbigkit packages fix security vulnerability: Florian Weimer found a stack-based buffer overflow flaw in the libjbig library (part of jbigkit). A specially-crafted image file read by libjbig could be used to cause a program linked to libjbig to crash or, potentially, to execute arbitrary code (CVE-2013-6369). The jbigkit package has been updated to version 2.1, which fixes this issue, as well as a few other bugs, including the ability of corrupted input data to force the jbig85 decoder into an end-less loop.

    References: https://advisories.mageia.org/MGASA-2014-0174.html, https://www.cl.cam.ac.uk/~mgk25/jbigkit/CHANGES, https://bugzilla.redhat.com/show_bug.cgi?id=1032273, https://bugs.mageia.org/show_bug.cgi?id=13174

    Affected packages

    Package

    Name: jbigkit

    Purl: pkg:rpm/mageia/jbigkit?arch=source&distro=mageia-3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.1-1.mga3

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High