CVE:CVE-2016-3616
CNNVD:CNNVD-201607-379
libjpeg是一款用于处理JPEG格式图像数据的C语言库。该产品包括JPEG解码、JPEG编码和其他JPEG功能。
libjpeg-turbo中存在代码问题漏洞。攻击者可利用该漏洞在受影响应用程序上下文中执行任意代码，或造成拒绝服务。
solution:Upgrade libjpeg-turbo libjpeg-turbo to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux to a higher version than 7.4,and avoid the version 7.4; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,and avoid the version 12.04,14.04,16.04,18.04,18.10