PT-2018-10559 · Jpegoptim+1 · Jpegoptim+1

Glen-Maco · Publicado 2018-04-18 · Atualizado 2018-06-26 · CVE-2018-11416

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions jpegoptim versions 1.4.5

Description The issue is related to an invalid use of realloc() and free() in jpegoptim.c, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts.

Recommendations For jpegoptim version 1.4.5, update to version 1.4.6 to resolve the issue.

Correção

DoS

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2018-1602

CVE-2018-11416

Produtos afetados

Alt Linux

Jpegoptim

Referências · 10

• https://github.com/tjko/jpegoptim/blob/master/README · Nota
• https://github.com/tjko/jpegoptim/issues/57 · Nota
• https://osv.dev/vulnerability/CVE-2018-11416 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11416 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11416 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-11416 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2018-1602 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2018-11416 · Nota
• https://cve.org/CVERecord?id=CVE-2018-11416 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11416 · Aviso do Fabricante