CVE-2018-11230

NameCVE-2018-11230
Descriptionjbig2_add_page in jbig2enc.cc in libjbig2enc.a in jbig2enc 0.29 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted file.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1059282

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
jbig2enc (PTS)forky, sid, trixie0.30-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
jbig2encsource(unstable)0.30-11059282

Notes

https://github.com/agl/jbig2enc/issues/61
https://github.com/agl/jbig2enc/commit/8bfab607cdb8554db732a9b8d94f33067788e05f (0.30)
Search for package or bug name: Reporting problems