Lucene search

TenableCVELIST:CVE-2018-1152

HistoryJun 12, 2018 - 12:00 a.m.

CVE-2018-1152

2018-06-1200:00:00

tenable

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%

JSON

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.

CNA Affected

[
  {
    "product": "libjpeg-turbo",
    "vendor": "Tenable",
    "versions": [
      {
        "status": "affected",
        "version": "1.5.90"
      }
    ]
  }
]

References

lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html

lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html

www.securityfocus.com/bid/104543

github.com/libjpeg-turbo/libjpeg-turbo/commit/43e84cff1bb2bd8293066f6ac4eb0df61ddddbc6

lists.debian.org/debian-lts-announce/2019/01/msg00015.html

lists.debian.org/debian-lts-announce/2020/07/msg00033.html

usn.ubuntu.com/3706-1/

usn.ubuntu.com/3706-2/

www.tenable.com/security/research/tra-2018-17