CVE-2018-12601
Publication date 20 June 2018
Last updated 25 August 2025
Ubuntu priority
Description
There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.
From the Ubuntu Security Team
It was discovered that Sam2p incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| sam2p | 18.04 LTS bionic | Not in release |
| 16.04 LTS xenial |
Fixed 0.49.2-3+deb8u3build0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 0.49.2-3+deb8u3build0.14.04.1
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
9.8 · Critical
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |