CVE-2018-20330

Publication date 21 December 2018

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libjpeg-turbo	19.10 eoan	Fixed 2.0.2-0ubuntu1
	19.04 disco	Fixed 2.0.1-0ubuntu2.2
	18.10 cosmic	Ignored
	18.04 LTS bionic	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected

Notes

mdeslaur

introduced by: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/aa7459050d7a50e1d8a99488902d41fbc118a50f

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
libjpeg-turbo	Upstream: 3d9c64e

Severity score breakdown

Parameter	Value
Base score	8.8 · High
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H