CVE-2018-11212
Medium
Description
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Ijg Libjpeg
PublishedMay 16, 2018
First seenMay 16, 2018
How to fix
Vendor advisories
- usn.ubuntu.com/3706-2/
- access.redhat.com/errata/RHSA-2019:0474
- usn.ubuntu.com/3706-1/
- access.redhat.com/errata/RHSA-2019:0469
- access.redhat.com/errata/RHSA-2019:0473
- access.redhat.com/errata/RHSA-2019:0472
- access.redhat.com/errata/RHSA-2019:0640
- access.redhat.com/errata/RHSA-2019:1238
- access.redhat.com/errata/RHSA-2019:2052
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ijg libjpeg | 9a | — |
| debian debian_linux | 8.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 18.04 | — |
| netapp oncommand_unified_manager | No range specified, 7.3 ≤ v, 9.4 ≤ v | — |
| netapp oncommand_workflow_automation | No range specified | — |
| netapp snapmanager | No range specified | — |
| oracle jdk | 1.7.0, 1.8.0, 11.0.1 | — |
| oracle jre | 8.0 | — |
| redhat satellite | 5.8 | — |
| redhat enterprise_linux_desktop | 6.0, 7.0 | — |
| redhat enterprise_linux_server | 6.0, 7.0 | — |
| redhat enterprise_linux_workstation | 6.0, 7.0 | — |
| opensuse leap | 15.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.