Medium · published May 16, 2018
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
| Product | Versions | Fixed in |
|---|---|---|
| ijg/libjpeg | all versions | — |
| debian/debian_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| netapp/oncommand_unified_manager | all versions | — |
| netapp/oncommand_unified_manager | ≥ 7.3 | — |
| netapp/oncommand_unified_manager | ≥ 9.4 | — |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/snapmanager | all versions | — |
| netapp/snapmanager | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jre | all versions | — |
| redhat/satellite | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| opensuse/leap | all versions | — |