CVE-2018-11813
Fixed in a distro release EPSS 3%
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
Products: ijg libjpeg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.11 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.12 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.13 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.14 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.15 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.16 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.17 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.18 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.19 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.20 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.21 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.22 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.23 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.24 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.5 | libjpeg-turbo | 1.5.3-r2 |
| Alpine 3.6 | libjpeg-turbo | 1.5.3-r2 |
| Alpine 3.7 | libjpeg-turbo | 1.5.3-r2 |
| Alpine 3.8 | libjpeg-turbo | 1.5.3-r3 |
| Alpine 3.9 | libjpeg-turbo | 1.5.3-r3 |
| Amazon Linux 2 | libjpeg-turbo | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-devel | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-static | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | libjpeg-turbo-utils | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | turbojpeg | 1.2.90-6.amzn2.0.3 |
| Amazon Linux 2 | turbojpeg-devel | 1.2.90-6.amzn2.0.3 |
| Debian 12 | libjpeg-turbo | 1:2.0.5-1 |
| Debian 13 | libjpeg-turbo | 1:2.0.5-1 |
| Debian 14 | libjpeg-turbo | 1:2.0.5-1 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-debuginfo | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-devel | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-static | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | libjpeg-turbo-utils | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | turbojpeg | 0:1.2.90-8.el7 |
| Red Hat Enterprise Linux 7 | turbojpeg-devel | 0:1.2.90-8.el7 |
| SUSE Linux Enterprise Desktop 12 SP3 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | libjpeg62-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | libjpeg62-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | libjpeg-turbo | 1.5.3-5.7.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | libjpeg62-turbo | 1.5.3-5.7.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | libjpeg-turbo | 1.5.3-5.7.1 |
| SUSE Linux Enterprise Module for Package Hub 15 | libjpeg-turbo | 1.5.3-5.7.1 |
| SUSE Linux Enterprise Server 11 SP4 | jpeg | 6b-879.12.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Server 12 SP3 | libjpeg62-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Server 12 SP4 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Server 12 SP4 | libjpeg62-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | jpeg | 6b-879.12.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libjpeg62-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | libjpeg62-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | jpeg | 6b-879.12.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libjpeg62-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | libjpeg-turbo | 1.5.3-31.14.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | libjpeg62-turbo | 1.5.3-31.14.2 |
| Ubuntu 18.04 LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.6 |
| Ubuntu 18.04 LTS | libjpeg6b | no fix |
| Ubuntu 18.04 LTS | libjpeg9 | no fix |
| Ubuntu 20.04 LTS | libjpeg-turbo | 2.0.3-0ubuntu1.20.04.3 |
| Ubuntu 20.04 LTS | libjpeg6b | no fix |
| Ubuntu 22.04 LTS | libjpeg6b | no fix |
| Ubuntu 24.04 LTS | libjpeg6b | no fix |
| Ubuntu 25.10 | libjpeg6b | no fix |
| Ubuntu 26.04 LTS | libjpeg6b | no fix |
| Ubuntu 26.10 | libjpeg6b | no fix |
| Ubuntu Pro 14.04 LTS | libjpeg-turbo | 1.3.0-0ubuntu2.1+esm2 |
| Ubuntu Pro 14.04 LTS | libjpeg6b | 6b1-4ubuntu1+esm1 |
| Ubuntu Pro 16.04 LTS | libjpeg-turbo | 1.4.2-0ubuntu3.4+esm1 |
| Ubuntu Pro 16.04 LTS | libjpeg6b | 1:6b2-2ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | libjpeg9 | 1:9b-1ubuntu1+esm1 |
| openSUSE Leap 15.0 | libjpeg-turbo | 1.5.3-lp150.4.3.2 |
| openSUSE Leap 15.0 | libjpeg62-turbo | 1.5.3-lp150.4.3.2 |
| openSUSE Tumbleweed | libjpeg-turbo | 8.2.2-65.2 |