CVE-2018-11212
Fixed in a distro release EPSS 5%
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
Products: ijg libjpeg, debian_linux, canonical ubuntu_linux, netapp oncommand_unified_manager, netapp oncommand_workflow_automation, netapp snapmanager, oracle jdk, oracle jre, redhat satellite, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | libjpeg-turbo | 1.2.90-5.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-devel | 1.2.90-5.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-devel | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-static | 1.2.90-5.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-static | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-utils | 1.2.90-5.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-utils | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | turbojpeg | 1.2.90-5.amzn2.0.3 |
| Amazon Linux 2 | turbojpeg | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | turbojpeg-devel | 1.2.90-5.amzn2.0.3 |
| Amazon Linux 2 | turbojpeg-devel | 1.2.90-6.amzn2.0.3 |
| Chainguard | openjdk-10 | no fix |
| Chainguard | openjdk-11-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0.53.0-r1 |
| Chainguard | openjdk-9-jre | no fix |
| Debian 12 | libjpeg-turbo | 1:1.4.2-1 |
| Debian 13 | libjpeg-turbo | 1:1.4.2-1 |
| Debian 14 | libjpeg-turbo | 1:1.4.2-1 |
| Debian 8 | libjpeg-turbo | 1:1.3.1-12+deb8u1 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-debuginfo | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-devel | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-static | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-utils | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | turbojpeg | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | turbojpeg-devel | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm | 1:1.8.0.5.35-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-demo | 1:1.8.0.5.35-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-devel | 1:1.8.0.5.35-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-headless | 1:1.8.0.5.35-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.35-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-plugin | 1:1.8.0.5.35-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-src | 1:1.8.0.5.35-3.el8_0 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-webstart | 1:1.8.0.5.35-3.el8_0 |
| Red Hat network satellite 5.8 | java-1.8.0-ibm | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat network satellite 5.8 | java-1.8.0-ibm-devel | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm | 1:1.7.1.4.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-demo | 1:1.7.1.4.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-devel | 1:1.7.1.4.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-jdbc | 1:1.7.1.4.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-plugin | 1:1.7.1.4.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-src | 1:1.7.1.4.40-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-demo | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-devel | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-plugin | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-src | 1:1.8.0.5.30-1jpp.1.el6_10 |
| Red Hat rhel extras 7 | java-1.7.1-ibm | 1:1.7.1.4.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-demo | 1:1.7.1.4.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-devel | 1:1.7.1.4.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-jdbc | 1:1.7.1.4.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-plugin | 1:1.7.1.4.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-src | 1:1.7.1.4.40-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm | 1:1.8.0.5.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-demo | 1:1.8.0.5.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-devel | 1:1.8.0.5.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-plugin | 1:1.8.0.5.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-src | 1:1.8.0.5.30-1jpp.1.el7 |
| SUSE Enterprise Storage 4 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Enterprise Storage 4 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Enterprise Storage 4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Enterprise Storage 4 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Enterprise Storage 4 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Enterprise Storage 5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE HPE Helion OpenStack 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Module for Legacy 15 | java-1_8_0-ibm | 1.8.0_sr5.40-3.24.1 |
| SUSE Linux Enterprise Module for Legacy 15 | java-1_8_0-ibm | 1.8.0_sr5.30-3.16.2 |
| SUSE Linux Enterprise Module for Legacy 15 | java-1_8_0-openjdk | 1.8.0.201-3.16.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | java-1_8_0-ibm | 1.8.0_sr5.40-3.24.1 |
| SUSE Linux Enterprise Module for Package Hub 15 | java-1_8_0-openjdk | 1.8.0.201-3.16.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | java-1_7_0-ibm | 1.7.0_sr10.40-65.35.1 |
| SUSE Linux Enterprise Server 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.40-26.36.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server 12 SP3 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server 12 SP3 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server 12 SP4 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server 12-LTSS | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server 12-LTSS | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.40-26.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | java-1_7_1-ibm | 1.7.1_sr4.40-26.36.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE OpenStack Cloud 7 | java-1_7_0-openjdk | 1.7.0.221-43.22.1 |
| SUSE OpenStack Cloud 7 | java-1_7_1-ibm | 1.7.1_sr4.40-38.34.1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-ibm | 1.8.0_sr5.30-30.46.1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-openjdk | 1.8.0.212-27.32.1 |
| SUSE OpenStack Cloud 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| SUSE OpenStack Cloud Crowbar 8 | java-1_8_0-ibm | 1.8.0_sr5.40-30.54.1 |
| Ubuntu 14.04 LTS | libjpeg-turbo | 1.3.0-0ubuntu2.1 |
| Ubuntu 16.04 LTS | libjpeg-turbo | 1.4.2-0ubuntu3.1 |
| Ubuntu 18.04 LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.1 |
| Ubuntu 18.04 LTS | libjpeg6b | no fix |
| Ubuntu 18.04 LTS | libjpeg9 | no fix |
| Ubuntu 20.04 LTS | libjpeg6b | no fix |
| Ubuntu 22.04 LTS | libjpeg6b | no fix |
| Ubuntu 24.04 LTS | libjpeg6b | no fix |
| Ubuntu 25.10 | libjpeg6b | no fix |
| Ubuntu 26.04 LTS | libjpeg6b | no fix |
| Ubuntu 26.10 | libjpeg6b | no fix |
| Ubuntu Pro 14.04 LTS | libjpeg6b | 6b1-4ubuntu1+esm1 |
| Ubuntu Pro 16.04 LTS | libjpeg6b | 1:6b2-2ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | libjpeg9 | 1:9b-1ubuntu1+esm1 |
| Wolfi | openjdk-10 | no fix |
| Wolfi | openjdk-9-jre | no fix |
| openSUSE Leap 15.0 | java-1_8_0-openjdk | 1.8.0.201-lp150.2.12.1 |
| openSUSE Tumbleweed | java-11-openjdk | 11.0.12.0-3.1 |
| openSUSE Tumbleweed | java-13-openjdk | 13.0.8.0-3.1 |
| openSUSE Tumbleweed | java-15-openjdk | 15.0.4.0-2.1 |
| openSUSE Tumbleweed | java-1_8_0-openjdk | 1.8.0.302-2.2 |