CVE-2018-11212

Published: May 16, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

Affected (24)

Products: Ijg: Libjpeg · Debian: Debian Linux · Canonical: Ubuntu Linux · +4 more

Show all products

1 product

1 product

1 product

3 products

Oncommand Unified Manager

Oncommand Workflow Automation

2 products

4 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Satellite

Opensuse

1 product

Leap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ijg Libjpeg	Version 9a

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Configuration D

6 vulnerable

Vulnerable Software	Affected Versions
Netapp Oncommand Unified Manager	All versions
Netapp Oncommand Unified Manager	From 9.4
Netapp Oncommand Unified Manager	From 7.3
Netapp Oncommand Workflow Automation	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions

Configuration E

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.7.0 update201
Oracle Jdk	Version 1.8.0 update192
Oracle Jdk	Version 11.0.1
Oracle Jre	Version 8.0 update_191

Configuration F

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Satellite	Version 5.8

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.0

Related CWEs

CWE-369

Divide By Zero

The product divides a value by zero.

References (42)

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html

Source: cve@mitre.org

http://www.ijg.org/

Source: cve@mitre.org

http://www.securityfocus.com/bid/106583

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2019:0469

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0472

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0473

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0474

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0640

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1238

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:2052

Source: cve@mitre.org

https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/zzyyrr/divide-by-zero-in-libjpeg-9d.git

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190118-0001/

Source: cve@mitre.org

PatchThird Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03958en_us

Source: cve@mitre.org

https://usn.ubuntu.com/3706-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/3706-2/

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

Source: cve@mitre.org

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Source: cve@mitre.org

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html