Bug 1938345 (CVE-2021-0384)

Summary: CVE-2021-0384 libjpeg-turbo: NULL pointer dereference in read_and_discard_scanlines function in jdapistd.c
Product: [Other] Security Response Reporter: Guilherme de Almeida Suckevicz <gsuckevi>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED NOTABUG QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: aprice, caswilli, erik-fedora, jburrell, jsamir, jvasik, kaycoth, klember, manisandro, negativo17, nforro, oezr, phracek, rblanco, rh-spice-bugs, rjones, sthirugn, tmeszaro, vkrizan, vmugicag, vonsch
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
[REJECTED CVE] A vulnerability has been identied in libjpeg-turbo in read_and_discard_scanlines function of jdapistd.c file. There is a possible null pointer exception due to a missing NULL check. This could lead to remote denial of service with no additional execution privileges needed.
 Story Points: ---
Clone Of: Environment:
Last Closed: 2021-03-15 19:24:53 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1938346, 1938347    
Bug Blocks: 1938348    

Description Guilherme de Almeida Suckevicz 2021-03-12 20:32:34 UTC 
In read_and_discard_scanlines of jdapistd.c, there is a possible null pointer exception due to a missing NULL check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Reference:
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/470

Upstream patch:
https://github.com/libjpeg-turbo/libjpeg-turbo/commit/6d2e8837b440ce4d8befd805a5abc0d351028d70
Comment 1 Guilherme de Almeida Suckevicz 2021-03-12 20:33:03 UTC 
Created libjpeg-turbo tracking bugs for this issue:

Affects: fedora-all [bug 1938346]


Created mingw-libjpeg-turbo tracking bugs for this issue:

Affects: fedora-all [bug 1938347]
Comment 3 Todd Cullum 2021-03-15 19:26:14 UTC 
Statement:

Red Hat Product Security does not consider this to be a vulnerability. It is not practically exploitable.