CVE-2018-11213

Published: 05/16/2018 17:29:00
An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
MEDIUM
CVSS v3: 6.5

Status

DocFilters Release Package State Justification Comment
25.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.4 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.4.0 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.3 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.2.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.2 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
23.3 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
23.2.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
23.2 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
23.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.4 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.3 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.2 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.11.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.11 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.8.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.8 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.5.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.5.0 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.2.0 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.20 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.19.3667 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.18.3599 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.17 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.16.3445 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.15.3368 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.14.3263 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.13.3179 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.12.3054 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.11.3040 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.11.2990 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.10.2934 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.9.2878 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.8.2822 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.

Severity score breakdown

Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
HIGH
Base Score
6.5
Base Severity
MEDIUM
Confidentiality Impact
NONE
Integrity Impact
NONE
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
REQUIRED
Vector String
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Version
3.0

References