medium6.5
CVE-2018-11214
An issue was discovered in libjpeg 9a.
Impact
An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ijg | Libjpeg | Version 9a |
| Debian | Debian Linux | Version 8.0 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 16.04, 17.10, 18.04 |
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2019:2052
- https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a
- https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html
- https://usn.ubuntu.com/3706-1/
- https://usn.ubuntu.com/3706-2/
- https://access.redhat.com/errata/RHSA-2019:2052
- https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a
- https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html
- https://usn.ubuntu.com/3706-1/
- https://usn.ubuntu.com/3706-2/