Unrated severityNVD Advisory· Published May 16, 2018· Updated Aug 5, 2024
CVE-2018-11212
CVE-2018-11212
Description
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
Affected products
106- osv-coords106 versionspkg:apk/chainguard/openjdk-11-openj9pkg:apk/chainguard/openjdk-11-openj9-dbgpkg:apk/chainguard/openjdk-11-openj9-default-jdkpkg:apk/chainguard/openjdk-11-openj9-default-jvmpkg:apk/chainguard/openjdk-11-openj9-default-policypkg:apk/chainguard/openjdk-11-openj9-docpkg:apk/chainguard/openjdk-11-openj9-jmodspkg:apk/chainguard/openjdk-11-openj9-jrepkg:apk/chainguard/openjdk-17-openj9pkg:apk/chainguard/openjdk-17-openj9-dbgpkg:apk/chainguard/openjdk-17-openj9-default-jdkpkg:apk/chainguard/openjdk-17-openj9-default-jvmpkg:apk/chainguard/openjdk-17-openj9-default-policypkg:apk/chainguard/openjdk-17-openj9-docpkg:apk/chainguard/openjdk-17-openj9-jmodspkg:apk/chainguard/openjdk-17-openj9-jrepkg:apk/chainguard/openjdk-21-openj9pkg:apk/chainguard/openjdk-21-openj9-dbgpkg:apk/chainguard/openjdk-21-openj9-default-jdkpkg:apk/chainguard/openjdk-21-openj9-default-jvmpkg:apk/chainguard/openjdk-21-openj9-default-policypkg:apk/chainguard/openjdk-21-openj9-docpkg:apk/chainguard/openjdk-21-openj9-jmodspkg:apk/chainguard/openjdk-21-openj9-jrepkg:apk/chainguard/openjdk-8-openj9pkg:apk/chainguard/openjdk-8-openj9-dbgpkg:apk/chainguard/openjdk-8-openj9-default-jdkpkg:apk/chainguard/openjdk-8-openj9-default-jvmpkg:apk/chainguard/openjdk-8-openj9-docpkg:apk/chainguard/openjdk-8-openj9-jrepkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/java-13-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/java-15-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/java-1_8_0-openjdk&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/java-1_8_0-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/suse/java-1_7_0-ibm&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/java-1_8_0-ibm&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP1pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20OpenStack%20Cloud%207
< 0.53.0-r0+ 105 more
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 11.0.12.0-3.1
- (no CPE)range: < 13.0.8.0-3.1
- (no CPE)range: < 15.0.4.0-2.1
- (no CPE)range: < 1.8.0.201-lp150.2.12.1
- (no CPE)range: < 1.8.0.302-2.2
- (no CPE)range: < 1.7.0_sr10.40-65.35.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-26.36.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-26.36.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-26.36.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-3.16.2
- (no CPE)range: < 1.8.0_sr5.40-3.24.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.201-3.16.1
- (no CPE)range: < 1.8.0.201-3.16.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
20- lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.htmlmitrevendor-advisoryx_refsource_SUSE
- lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.htmlmitrevendor-advisoryx_refsource_SUSE
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.htmlmitrevendor-advisoryx_refsource_SUSE
- access.redhat.com/errata/RHSA-2019:0469mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2019:0472mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2019:0473mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2019:0474mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2019:0640mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2019:1238mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2019:2052mitrevendor-advisoryx_refsource_REDHAT
- usn.ubuntu.com/3706-1/mitrevendor-advisoryx_refsource_UBUNTU
- usn.ubuntu.com/3706-2/mitrevendor-advisoryx_refsource_UBUNTU
- www.ijg.orgmitrex_refsource_MISC
- www.securityfocus.com/bid/106583mitrevdb-entryx_refsource_BID
- github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9amitrex_refsource_MISC
- lists.debian.org/debian-lts-announce/2019/01/msg00015.htmlmitremailing-listx_refsource_MLIST
- security.netapp.com/advisory/ntap-20190118-0001/mitrex_refsource_CONFIRM
- support.hpe.com/hpsc/doc/public/displaymitrex_refsource_CONFIRM
- www.oracle.com/security-alerts/cpuapr2022.htmlmitrex_refsource_MISC
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.