Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-11212
HistoryMay 16, 2018 - 5:29 p.m.

CVE-2018-11212

2018-05-1617:29:00
CWE-369
[email protected]
web.nvd.nist.gov
4

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

JSON

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

Affected configurations

NVD
Node
ijglibjpegMatch9a
Node
debiandebian_linuxMatch8.0
Node
canonicalubuntu_linuxMatch12.04esm
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
Node
netapponcommand_unified_manager
OR
netapponcommand_unified_managerRange7.3≥windows
OR
netapponcommand_unified_managerRange9.4≥vmware_vsphere
OR
netapponcommand_workflow_automation
OR
netappsnapmanageroracle
OR
netappsnapmanagersap
Node
oraclejdkMatch1.7.0update201
OR
oraclejdkMatch1.8.0update192
OR
oraclejdkMatch11.0.1
OR
oraclejreMatch8.0update_191
Node
redhatsatelliteMatch5.8
OR
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
opensuseleapMatch15.0

References

Related

cve 1
nessus 51
redhatcve 1
openvas 27
ubuntucve 1
alpinelinux 1
cvelist 1
ibm 47
prion 1
debiancve 1
f5 1
amazon 3
veracode 1
suse 4
redhat 7
kaspersky 1
debian 1
ubuntu 5
osv 4
mageia 1
oraclelinux 1
centos 1
aix 1
cloudfoundry 1
photon 4
oracle 2
cve
cve
CVE-2018-11212
2018-05-16 17:29:00
nessus
nessus
EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2019-1305)
2019-05-01 00:00:00
Amazon Linux 2 : libjpeg-turbo (ALAS-2019-1198)
2019-04-26 00:00:00
EulerOS Virtualization 3.0.1.0 : libjpeg-turbo (EulerOS-SA-2019-1468)
2019-05-13 00:00:00
redhatcve
redhatcve
CVE-2018-11212
2020-01-26 15:56:42
openvas
openvas
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2019-1305)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2019-1468)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2019-1589)
2020-01-23 00:00:00
ubuntucve
ubuntucve
CVE-2018-11212
2018-05-16 00:00:00
alpinelinux
alpinelinux
CVE-2018-11212
2018-05-16 17:29:00
cvelist
cvelist
CVE-2018-11212
2018-05-16 17:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (Java CPU January 2019)
2022-09-14 15:02:20
Security Bulletin: Vulnerability in Oracle Java SE and libjpeg affects IBM Integrated Analytics System
2020-11-10 10:36:53
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Software Architect and Rational Software Architect for WebSphere Software
2020-09-10 17:03:14
prion
prion
Denial of service
2018-05-16 17:29:00
debiancve
debiancve
CVE-2018-11212
2018-05-16 17:29:00
f5
f5
K63404203 : Oracle Java SE vulnerability CVE-2018-11212
2019-02-07 00:00:00
amazon
amazon
Low: libjpeg-turbo
2019-04-25 16:41:00
Medium: libjpeg-turbo
2019-09-13 22:58:00
Medium: libjpeg-turbo
2019-11-04 22:23:00
veracode
veracode
Denial Of Service (DoS)
2019-05-16 03:57:00
suse
suse
Security update for java-1_8_0-openjdk (important)
2019-03-18 00:00:00
Security update for java-11-openjdk (important)
2019-02-12 00:00:00
Security update for java-1_7_0-openjdk (moderate)
2019-06-03 00:00:00
redhat
redhat
(RHSA-2019:0474) Critical: java-1.7.1-ibm security update
2019-03-07 15:44:12
(RHSA-2019:0473) Critical: java-1.7.1-ibm security update
2019-03-05 12:42:15
(RHSA-2019:0469) Critical: java-1.8.0-ibm security update
2019-03-06 21:43:02
kaspersky
kaspersky
KLA11403 Multiple vulnerabilities in Oracle Java SE
2019-01-15 00:00:00
debian
debian
[SECURITY] [DLA 1638-1] libjpeg-turbo security update
2019-01-22 22:18:58
ubuntu
ubuntu
Libjpeg6b vulnerabilities
2022-06-30 00:00:00
Libjpeg6b vulnerabilities
2022-06-30 00:00:00
libjpeg-turbo vulnerabilities
2018-07-10 00:00:00
osv
osv
libjpeg-turbo - security update
2019-01-22 00:00:00
libjpeg6b vulnerabilities
2022-06-30 12:54:31
libjpeg6b vulnerabilities
2022-06-30 14:35:28
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerability
2019-02-13 14:08:25
oraclelinux
oraclelinux
libjpeg-turbo security update
2019-08-13 00:00:00
centos
centos
libjpeg, turbojpeg security update
2019-08-30 03:16:23
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2019-04-16 10:52:12
cloudfoundry
cloudfoundry
USN-3706-1: libjpeg-turbo vulnerabilities | Cloud Foundry
2018-07-19 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2020-0084
2020-04-24 00:00:00
Critical Photon OS Security Update - PHSA-2020-3.0-0084
2020-04-24 00:00:00
Critical Photon OS Security Update - PHSA-2020-0290
2020-04-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

JSON
Related for NVD:CVE-2018-11212
cve1nessus51redhatcve1openvas27ubuntucve1alpinelinux1cvelist1ibm47prion1debiancve1f51amazon3veracode1suse4redhat7kaspersky1debian1ubuntu5osv4mageia1oraclelinux1centos1aix1cloudfoundry1photon4oracle2