CVE-2021-39515

Published: 09/20/2021 16:15:11
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service.
MEDIUM
CVSS v3: 6.5

Status

DocFilters Release Package State Justification Comment
25.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.4 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.4.0 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.3 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.2.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.2 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
23.3 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
23.2.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
23.2 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
23.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.4 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.3 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.2 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.11.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.11 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.8.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.8 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.5.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.5.0 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.2.0 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.20 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.19.3667 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.18.3599 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.17 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.16.3445 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.15.3368 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.14.3263 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.13.3179 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.12.3054 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.11.3040 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.11.2990 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.10.2934 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.9.2878 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.8.2822 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.

Severity score breakdown

Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
HIGH
Base Score
6.5
Base Severity
MEDIUM
Confidentiality Impact
NONE
Integrity Impact
NONE
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
REQUIRED
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Version
3.1

References