PT-2018-10403 · Independent Jpeg+3 · Libjpeg+3

Published 2018-05-16 · Updated 2022-06-30 · CVE-2018-11214

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libjpeg version 9a

Description An issue in the get text rgb row function in rdppm.c allows remote attackers to cause a denial of service, resulting in a Segmentation fault, via a crafted file.

Recommendations For libjpeg version 9a, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CESA-2019_2052

CVE-2018-11214

DLA-1638-1

RHSA-2019:2052

RHSA-2019_2052

USN-3706-1

USN-3706-2

USN-5336-1

USN-5497-1

USN-5497-2

Affected Products

Centos

Red Hat

Ubuntu

Libjpeg

References · 31

• 🔥 https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a · Exploit
• https://ubuntu.com/security/notices/USN-3706-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5497-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11214 · Security Note
• https://ubuntu.com/security/notices/USN-3706-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3706-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5336-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1152 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5336-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-11213 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-11214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15232 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-14152 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-11212 · Vendor Advisory