CVE-2018-11813

Published: June 6, 2018
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
HIGH
CVSS v3: 7.5

Status

DocFilters Release Package State Justification Comment
25.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.4 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.4.0 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.3 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.2.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.2 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
24.1 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
23.3 libjpeg (9e) Not Affected Code Not Present 9e does not match CVE configuration.
23.2.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
23.2 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
23.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.4 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.3 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.2 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
22.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.11.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.11 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.8.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.8 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.5.1 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.5.0 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
21.2.0 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.20 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.19.3667 libjpeg (9d) Not Affected Code Not Present 9d does not match CVE configuration.
11.4.18.3599 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.17 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.16.3445 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.15.3368 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.14.3263 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.13.3179 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.12.3054 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.11.3040 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.11.2990 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.10.2934 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.9.2878 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.
11.4.8.2822 libjpeg (9b) Not Affected Code Not Present 9b does not match CVE configuration.

Severity score breakdown

Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
HIGH
Base Score
7.5
Base Severity
HIGH
Confidentiality Impact
NONE
Integrity Impact
NONE
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
NONE
Vector String
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version
3.0

References