Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-18088

Fixed in a distro release EPSS 2%

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c

Published 2018-10-09 · CVE record · OSV

Products: uclouvain openjpeg, debian_linux

Distro releases

ReleasePackageFixed in
Alpine 3.10openjpeg2.3.0-r1
Alpine 3.11openjpeg2.3.0-r1
Alpine 3.12openjpeg2.3.0-r1
Alpine 3.13openjpeg2.3.0-r1
Alpine 3.14openjpeg2.3.0-r1
Alpine 3.15openjpeg2.3.0-r1
Alpine 3.16openjpeg2.3.0-r1
Alpine 3.17openjpeg2.3.0-r1
Alpine 3.18openjpeg2.3.0-r1
Alpine 3.19openjpeg2.3.0-r1
Alpine 3.20openjpeg2.3.0-r1
Alpine 3.21openjpeg2.3.0-r1
Alpine 3.22openjpeg2.3.0-r1
Alpine 3.23openjpeg2.3.0-r1
Alpine 3.24openjpeg2.3.0-r1
Alpine 3.6openjpeg2.3.0-r1
Alpine 3.7openjpeg2.3.0-r1
Alpine 3.8openjpeg2.3.0-r1
Alpine 3.9openjpeg2.3.0-r1
Debian 12openjpeg22.3.0-2
Debian 13openjpeg22.3.0-2
Debian 14openjpeg22.3.0-2
Debian 8openjpeg22.1.0-2+deb8u5
Debian 9openjpeg22.1.2-1.1+deb9u3
SUSE Linux Enterprise Module for Basesystem 15 SP6openjpeg22.3.0-150000.3.21.1
SUSE Linux Enterprise Module for Basesystem 15 SP7openjpeg22.3.0-150000.3.21.1
SUSE Linux Enterprise Module for Package Hub 15 SP6openjpeg22.3.0-150000.3.21.1
SUSE Linux Enterprise Module for Package Hub 15 SP7openjpeg22.3.0-150000.3.21.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5openjpeg22.1.0-4.24.1
Ubuntu 14.04 LTSopenjpegno fix
Ubuntu 16.04 LTSopenjpeg22.1.2-1.1+deb9u3build0.16.04.1
Ubuntu 18.04 LTSopenjpeg22.3.0-2build0.18.04.1
Ubuntu Pro 16.04 LTSopenjpeg1:1.5.2-3.1ubuntu0.1~esm2
openSUSE Leap 15.6openjpeg22.3.0-150000.3.21.1