PT-2018-3525 · Independent Jpeg+6 · Libjpeg+6

Chijinz · Publicado 2018-06-03 · Atualizado 2024-06-15 · CVE-2018-11813

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: libjpeg version 9c

Description: The issue is related to the read pixel function in rdtarga.c of the libjpeg library, which mishandles EOF, leading to a large loop. This is due to resource management errors. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations: For libjpeg version 9c, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

CWE-834

Identificadores relacionados

BDU:2020-03269

CESA-2019_2052

CVE-2018-11813

MGASA-2018-0327

OPENSUSE-SU-2019:1118-1

OPENSUSE-SU-2019_1118-1

OPENSUSE-SU-2019_1343-1

OPENSUSE-SU-2024:10952-1

RHSA-2019:2052

RHSA-2019_2052

SUSE-SU-2018:1825-1

SUSE-SU-2019:0711-1

SUSE-SU-2019:1111-1

USN-5336-1

USN-5497-1

USN-5497-2

USN-5553-1

USN-5631-1

Produtos afetados

Astra Linux

Centos

Linuxmint

Red Hat

Suse

Ubuntu

Libjpeg

Referências · 68

• https://github.com/ChijinZ/security_advisories/blob/master/libjpeg-v9c/mail.pdf · Nota
• https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9c · Nota
• https://osv.dev/vulnerability/USN-5497-2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-19644 · Nota
• https://ubuntu.com/security/notices/USN-5631-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-5336-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10952-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-11813 · Nota
• https://securitylab.ru/vulnerability/509277.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-11813 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-20330 · Nota
• https://bugzilla.suse.com/1062937 · Nota
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2018-11813 · Aviso do Fabricante