PT-2018-3525 · Independent Jpeg+6 · Libjpeg+6

Chijinz · Published 2018-06-03 · Updated 2024-06-15 · CVE-2018-11813

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: libjpeg version 9c

Description: The issue is related to the read pixel function in rdtarga.c of the libjpeg library, which mishandles EOF, leading to a large loop. This is due to resource management errors. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations: For libjpeg version 9c, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

CWE-834

Related Identifiers

BDU:2020-03269

CESA-2019_2052

CVE-2018-11813

MGASA-2018-0327

OPENSUSE-SU-2019:1118-1

OPENSUSE-SU-2019_1118-1

OPENSUSE-SU-2019_1343-1

OPENSUSE-SU-2024:10952-1

RHSA-2019:2052

RHSA-2019_2052

SUSE-SU-2018:1825-1

SUSE-SU-2019:0711-1

SUSE-SU-2019:1111-1

USN-5336-1

USN-5497-1

USN-5497-2

USN-5553-1

USN-5631-1

Affected Products

Astra Linux

Centos

Linuxmint

Red Hat

Suse

Ubuntu

Libjpeg

References · 68

• https://osv.dev/vulnerability/USN-5497-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5631-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5336-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10952-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11813 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-11813 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5497-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/3CDV3ULRXQEMV7OHCB5MSITEIVOI5EPN · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11813 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1825-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-11813 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:1118-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5553-1 · Vendor Advisory