CVE-2018-18088

Published: 09 October 2018

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
openjpeg2 Launchpad, Ubuntu, Debian	Upstream	Released (2.1.0-2+deb8u5)



	Ubuntu 18.04 LTS (Bionic Beaver)	Released (2.3.0-2build0.18.04.1)
	Ubuntu 16.04 ESM (Xenial Xerus)	Released (2.1.2-1.1+deb9u3build0.16.04.1)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.