CVE:CVE-2018-11212
CNNVD:CNNVD-201805-474
libjpeg是一款用于处理JPEG格式图像数据的C语言库。该产品包括JPEG解码、JPEG编码和其他JPEG功能。
libjpeg 9a版本中存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade ijg libjpeg to a higher version than 9a,and avoid the version 9a; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,and avoid the version 12.04,14.04,16.04,18.04; Upgrade netapp oncommand_unified_manager to a higher version than *,and avoid the version [7.3,),[9.4,),no fixed version after 7.3,no fixed version after 9.4; Upgrade netapp oncommand_workflow_automation to a higher version than *; Upgrade netapp snapmanager to a higher version than *; Upgrade oracle jdk to a higher version than 1.7.0:update201,1.8.0:update192,11.0.1,and avoid the version 1.7.0:update201,1.8.0:update192,11.0.1; Upgrade oracle jre to a higher version than 8.0:update_191,and avoid the version 8.0:update_191; Upgrade redhat satellite to a higher version than 5.8,and avoid the version 5.8; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0