CVE-2019-2201
HighAdvisory
Published 7 Nov 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.025
- 84th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 241
- of 17,781 indexed, latest versions
- Container images
- 152
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
libjpeg-turbo - security update
Carried by container images the latest versions of 241 of 17,781 indexed charts deploy, on 152 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libjpeg-turbodeb | 1:1.5.1-2, 1:1.5.1-2+deb9u1, 1.4.2-0ubuntu3, 1.4.2-0ubuntu3.1+1 more | 1:1.5.1-2+deb9u2, 1.4.2-0ubuntu3.3, 1.5.2-0ubuntu5.18.04.3 | 90 |
| libjpeg-turboapk | 1.5.3-r1, 1.5.3-r3, 1.5.3-r4, 1.5.3-r5+2 more | 1.5.3-r6, 2.0.4-r0 | 62 |
- OSV records
- ALPINE-CVE-2019-2201UBUNTU-CVE-2019-2201DLA-3037-1
- Also known as
- USN-4190-1
Charts affected
241 by stars
Container images carrying it
152 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 3e373fd5b8d4 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 86 |
| library/ | ce85468c5bad | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 7 |
| gradiant/ | a1ee6de94c04 | libjpeg-turbo | 1.5.3-r6 | 4 |
| hyperledger/ | 4ce6f43ded2e | libjpeg-turbo | 1.4.2-0ubuntu3.3 | 4 |
| hyperledger/ | f6c724592abf | libjpeg-turbo | 1.4.2-0ubuntu3.3 | 4 |
| oscarsotosanchez/ | 6e2e1279126b | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 4 |
| oscarsotosanchez/ | d4d020e9f272 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 4 |
| apache/ | e8b7c4ddd069 | libjpeg-turbo | 1.5.3-r6 | 3 |
| apache/ | 0bd3b25c4be4 | libjpeg-turbo | 1.5.3-r6 | 3 |
| omecproject/ | d59ccb138ffb | libjpeg-turbo | 1.4.2-0ubuntu3.3 | 3 |
| apachepulsar/ | b341ef76a852 | libjpeg-turbo | 1.5.3-r6 | 2 |
| fjvela/ | a8ebe5ca13fc | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 2 |
| fjvela/ | 3c840aebce22 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 2 |
| gradiant/ | c33d53913869 | libjpeg-turbo | 1.5.3-r6 | 2 |
| gradiant/ | 97657d56e927 | libjpeg-turbo | 2.0.4-r0 | 2 |
| htmlprogrammer2001/ | a7e0a233a9bc | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 2 |
| library/ | b1d09e971889 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 2 |
| mojaloop/ | 5f025fe3554b | libjpeg-turbo | 1.5.3-r6 | 2 |
| mojaloop/ | c338940807c9 | libjpeg-turbo | 1.5.3-r6 | 2 |
| mojaloop/ | 89cb2e16a2a3 | libjpeg-turbo | 1.5.3-r6 | 2 |
| nachomillangarcia/ | e4ce056f2d6d | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 2 |
| neilpeterson/ | 84062718347c | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 2 |
| statsd/ | dab129e74c25 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 2 |
| amancevice/ | c8c04bfe3d66 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| apacheignite/ | d7deab68b8fa | libjpeg-turbo | 1.5.3-r6 | 1 |
| apache/ | e2be712fc4f4 | libjpeg-turbo | 1.5.3-r6 | 1 |
| apache/ | 1bd5756f6273 | libjpeg-turbo | 1.5.3-r6 | 1 |
| apache/ | 641237e0299b | libjpeg-turbo | 1.5.3-r6 | 1 |
| apache/ | 67d50e4deff4 | libjpeg-turbo | 1.5.3-r6 | 1 |
| bivas/ | 05545994f806 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| bryanalves/ | 95f73dce8b21 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| bryanalves/ | af47dfbb9413 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| cheyang/ | 46cc34755493 | libjpeg-turbo | 1.4.2-0ubuntu3.3 | 1 |
| codaprotocol/ | 37c68e67a401 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| codaprotocol/ | 4ba4dd3a041f | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | e1c176458aaf | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | 9e24264ea8f3 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | d3577ddd5c67 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | d8e23f10e882 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | 583d2cd8476c | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | d9b38e234de9 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | 353dc46303ac | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | 08524d8327b8 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | cf163d2b95b5 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| conduction/ | af3e9f551ad1 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| daskdev/ | 052630f5ca04 | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.3 | 1 |
| davidvmar/ | 2a68e9ac7f09 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| davidvmar/ | 5663f5b24615 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |
| dniel/ | 8519808fba22 | libjpeg-turbo | 1.5.3-r6 | 1 |
| douz/ | fa6a57de2b72 | libjpeg-turbo | 1:1.5.1-2+deb9u2 | 1 |