CVE-2018-18088

Published: 09 October 2018

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c

Priority

Medium

CVSS 3 base score: 6.5

Status

Package Release Status
openjpeg2
Launchpad, Ubuntu, Debian
Upstream
Released (2.1.0-2+deb8u5)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (2.3.0-2build0.18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (2.1.2-1.1+deb9u3build0.16.04.1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist