CVE-2018-11212: libjpeg 9a; +13 more affected products

Affected technology

libjpeg · 9a
ijg

debian linux · 8.0
debian

ubuntu linux · 12.04
canonical

ubuntu linux · 14.04
canonical

ubuntu linux · 16.04
canonical

ubuntu linux · 18.04
canonical

oncommand unified manager · Exact affected versions not specified by the source
netapp

oncommand unified manager · from 7.3 (inclusive)
netapp

oncommand unified manager · from 9.4 (inclusive)
netapp

oncommand workflow automation · Exact affected versions not specified by the source
netapp

snapmanager · Exact affected versions not specified by the source
netapp

jdk · 1.7.0 · update update201
oracle

jdk · 1.8.0 · update update192
oracle

jdk · 11.0.1
oracle

jre · 8.0 · update update_191
oracle

satellite · 5.8
redhat

enterprise linux desktop · 6.0
redhat

enterprise linux desktop · 7.0
redhat

enterprise linux server · 6.0
redhat

enterprise linux server · 7.0
redhat

enterprise linux workstation · 6.0
redhat

enterprise linux workstation · 7.0
redhat

leap · 15.0
opensuse

n/a · n/a
Vendor not specified by the source

Component: Not specified by the source
Function: in

Attack conditions (NVD, CVSS 3.0): Network (remote) · No privileges required · User interaction required

What an attacker can do

Remote attackers can cause a denial of service (divide-by-zero error) via a crafted file. NVD’s CVSS 3.0 assessment (base score 6.5/10) rates confidentiality and integrity impact as none; availability impact as high.