suse · CVE-2018-1152

Quick triage

Priority: medium Published: 2021-05-30 14:07:00 UTC Updated: 2026-04-17 15:43:45 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-1152 severity moderate: SUSE including 310 source package names (0.38.1:libjpeg8-8.1.2-5.7.1, 0.45.0.7.7.1:libjpeg8-8.1.2-5.7.1, …), 479 product×package rows across 86 product lines (Container bci/openjdk, Container bci/openjdk-devel, … (86 product lines)): Fixed 248, Known Affected 231.

Description:

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.

cvelogic Threat Intelligence