Division by zero in libjpeg - CVE-2018-11212

Vulnerability identifier: #VU17049

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-11212

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition.

The weakness exists due to division by zero error within the libjpeg library within the libjpeg-turbo in alloc_sarray() function of jmemmgr.c file. A remote attacker can pass a specially crafted file the to affected application and cause application to crash.

libjpeg
Amazon Linux AMI
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Ubuntu
Opensuse
IBM Cloud Transformation Advisor
Red Hat Satellite
Autodesk Infraworks
EMC Data Protection Advisor
Dell EMC Data Protection Search
xen (Alpine package)
openjdk8 (Alpine package)
java-1.7.1-ibm-src (Red Hat package)
java-1.7.1-ibm-plugin (Red Hat package)
java-1.7.1-ibm-jdbc (Red Hat package)
java-1.7.1-ibm-devel (Red Hat package)
java-1.7.1-ibm-demo (Red Hat package)
java-1.7.1-ibm (Red Hat package)
java-1.8.0-ibm-devel (Red Hat package)
java-1.8.0-ibm-demo (Red Hat package)
java-1.8.0-ibm (Red Hat package)
java-1.8.0-ibm-jdbc (Red Hat package)
java-1.8.0-ibm-plugin (Red Hat package)
java-1.8.0-ibm-src (Red Hat package)
libjpeg62 (Ubuntu package)
Oracle Java SE
Java SE Embedded
Oracle Internet Directory
EMC Integrated Data Protection Appliance
Data Computing Appliance (DCA)
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)

Install update from vendor's website.

libjpeg - update to 9b
IBM Cloud Transformation Advisor - update to 1.9.8
xen (Alpine package) - update to 4.6.6-r5
openjdk8 (Alpine package) - update to 8.201.08-r0
Autodesk Infraworks - addressed in versions 2021.2 Hotfix 9, 2023.1 Hotfix 1
java-1.7.1-ibm-src (Red Hat package) - addressed in versions 1.7.1.4.40-1jpp.1.el6_10, 1.7.1.4.40-1jpp.1.el7
java-1.7.1-ibm-plugin (Red Hat package) - addressed in versions 1.7.1.4.40-1jpp.1.el6_10, 1.7.1.4.40-1jpp.1.el7
java-1.7.1-ibm-jdbc (Red Hat package) - addressed in versions 1.7.1.4.40-1jpp.1.el6_10, 1.7.1.4.40-1jpp.1.el7
java-1.7.1-ibm-devel (Red Hat package) - addressed in versions 1.7.1.4.40-1jpp.1.el6_10, 1.7.1.4.40-1jpp.1.el7
java-1.7.1-ibm-demo (Red Hat package) - addressed in versions 1.7.1.4.40-1jpp.1.el6_10, 1.7.1.4.40-1jpp.1.el7
java-1.7.1-ibm (Red Hat package) - addressed in versions 1.7.1.4.40-1jpp.1.el6_10, 1.7.1.4.40-1jpp.1.el7
java-1.8.0-ibm-devel (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-demo (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-jdbc (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-plugin (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
java-1.8.0-ibm-src (Red Hat package) - addressed in versions 1.8.0.5.30-1jpp.1.el6_10, 1.8.0.5.30-1jpp.1.el7
EMC Integrated Data Protection Appliance - update to 2.3
Data Computing Appliance (DCA) - update to 3.5.3.0
Dell EMC Unity Operating Environment (OE) - update to 5.0.3.0.5.014
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.3.0.5.014
libjpeg62 (Ubuntu package) - update to 6 b14ubuntu1+esm1
EMC Data Protection Advisor - addressed in versions 6.5 patch 136, 18.1 patch 74, 18.2 patch 26
Dell EMC Data Protection Search - update to 18.2.1

• https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a

• Multiple vulnerabilities in Oracle Java SE
• OpenSUSE Linux update for java-11-openjdk
• OpenSUSE Linux update for java-1
• Amazon Linux AMI update for libjpeg-turbo
• Red Hat update for libjpeg-turbo
• OpenSUSE Linux update for java-1_7_0-openjdk
• OpenSUSE Linux update for java-1_8_0-openjdk
• Division by zero in openjdk7 (Alpine package)
• Division by zero in openjdk8 (Alpine package)
• Multiple vulnerabilities in Oracle Internet Directory
• Ubuntu update for libjpeg6b
• Multiple vulnerabilities in Dell EMC Integrated Data Protection Appliance
• Multiple vulnerabilities in Dell EMC Data Protection Advisor
• Multiple vulnerabilities in Dell EMC Search
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Multiple vulnerabilities in Autodesk InfraWorks
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Red Hat Enterprise Linux 7 Supplementary update for java-1.7.1-ibm
• Red Hat Enterprise Linux 7 Supplementary update for java-1.8.0-ibm
• Red Hat Enterprise Linux 6 Supplementary update for java-1.8.0-ibm
• Red Hat Enterprise Linux 6 Supplementary update for java-1.7.1-ibm
• Red Hat Satellite 5 update for java-1.8.0-ibm
• Dell EMC Unity update for third-party components
• Multiple vulnerabilities in Oracle Java SE