Orta CVSS 6.5 PoC var

CVE-2018-11212: Libjpeg: güvenlik açığı

Yayın: 16 Mayıs 2018 20:29 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

Özet bilgiler

Ürün: Ijg Libjpeg
CVSS v3.1: 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS: %4,56 (yüzdelik 92)
CWE: CWE-369
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
ijg-libjpeg	9a	9a	—
debian-debian-linux	8.0	8.0	—
canonical-ubuntu-linux	12.04	12.04	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
netapp-oncommand-unified-manager	—	—	—
netapp-oncommand-unified-manager	7.3	—	—
netapp-oncommand-unified-manager	9.4	—	—
netapp-oncommand-workflow-automation	—	—	—
netapp-snapmanager	—	—	—
netapp-snapmanager	—	—	—
oracle-jdk	1.7.0	1.7.0	—
oracle-jdk	1.8.0	1.8.0	—
oracle-jdk	11.0.1	11.0.1	—
oracle-jre	8.0	8.0	—
redhat-satellite	5.8	5.8	—
redhat-enterprise-linux-desktop	6.0	6.0	—
redhat-enterprise-linux-desktop	7.0	7.0	—
redhat-enterprise-linux-server	6.0	6.0	—
redhat-enterprise-linux-server	7.0	7.0	—
redhat-enterprise-linux-workstation	6.0	6.0	—
redhat-enterprise-linux-workstation	7.0	7.0	—
opensuse-leap	15.0	15.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları