Oval Definition:
oval:com.ubuntu.disco:def:2018203300000000
Revision Date
:
2018-12-21
Version
:
1
Title
:
CVE-2018-20330 on Ubuntu 19.04 (disco) - low.
Description
:
The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2018-20330
Platform(s)
:
Ubuntu 19.04
Product(s)
:
Definition Synopsis
Ubuntu 19.04 (disco) is installed.
AND
libjpeg-turbo package in disco was vulnerable but has been fixed (note: '2.0.1-0ubuntu2.2').
BACK