Read the docs
TI-2018-09999 Aliases CVE-2018-13785GHSA-fj59-ccrm-8h5w

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length…

Priority LOW 36CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 19 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.04378 91st percentileScored 2026-11-07
Fix Partial Red Hat: 12 advisoriesRed Hat: 19 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 19

CPEVersionsRoleVendor
cpe:2.3:a:libpng:libpng:1.6.34:*:*:*:*:*:*:*1.6.34Vulnerablepnggroup
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*17.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:a:oracle:jdk:1.6.0:update201:*:*:*:*:*:*1.6.0 update201VulnerableOracle
cpe:2.3:a:oracle:jdk:1.7.0:update191:*:*:*:*:*:*1.7.0 update191VulnerableOracle
cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:*1.8.0 update181VulnerableOracle
cpe:2.3:a:oracle:jdk:11.0.0:*:*:*:*:*:*:*11.0.0VulnerableOracle
cpe:2.3:a:oracle:jre:1.6.0:update201:*:*:*:*:*:*1.6.0 update201VulnerableOracle
  • cpe:2.3:a:libpng:libpng:1.6.34:*:*:*:*:*:*:* Versions 1.6.34 Vulnerable ·pnggroup
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* Versions 17.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:a:oracle:jdk:1.6.0:update201:*:*:*:*:*:* Versions 1.6.0 update201 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.7.0:update191:*:*:*:*:*:* Versions 1.7.0 update191 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:* Versions 1.8.0 update181 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:11.0.0:*:*:*:*:*:*:* Versions 11.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.6.0:update201:*:*:*:*:*:* Versions 1.6.0 update201 Vulnerable ·Oracle
Show 9 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oracle:jre:1.7.0:update191:*:*:*:*:*:*1.7.0 update191VulnerableOracle
cpe:2.3:a:oracle:jre:1.8.0:update181:*:*:*:*:*:*1.8.0 update181VulnerableOracle
cpe:2.3:a:oracle:jre:11.0.0:*:*:*:*:*:*:*11.0.0VulnerableOracle
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
  • cpe:2.3:a:oracle:jre:1.7.0:update191:*:*:*:*:*:* Versions 1.7.0 update191 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.8.0:update181:*:*:*:*:*:* Versions 1.8.0 update181 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:11.0.0:*:*:*:*:*:*:* Versions 11.0.0 Vulnerable ·Oracle
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat

Remediation

Red Hat 12 advisories

  • RHSA-2018:3852 Released 2018-12-18 · Red Hat rating Moderate
    java-1.8.0-ibm security update
    • Red Hat Satellite 5.8 (RHEL v.6) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el6_10
  • RHSA-2018:3779 Released 2018-12-05 · Red Hat rating Moderate
    java-1.7.1-ibm security update
    • Red Hat Satellite 5.6 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el6_10
    • Red Hat Satellite 5.7 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el6_10
  • RHSA-2018:3671 Released 2018-11-26 · Red Hat rating Critical
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el6_10 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el6_10 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el6_10 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el6_10, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el6_10 +3
Show 9 more Red Hat advisories
  • RHSA-2018:3672 Released 2018-11-26 · Red Hat rating Critical
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el7 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.35-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.35-1jpp.1.el7 +3
  • RHSA-2018:3533 Released 2018-11-09 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el6_10 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el6_10 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el6_10 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el6_10, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el6_10 +3
  • RHSA-2018:3534 Released 2018-11-09 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el7 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.5.25-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.5.25-1jpp.1.el7 +3
  • RHSA-2018:3003 Released 2018-10-24 · Red Hat rating Critical
    java-1.8.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el6 +3
  • RHSA-2018:3002 Released 2018-10-24 · Red Hat rating Critical
    java-1.8.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.191-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.191-1jpp.1.el7 +3
  • RHSA-2018:3001 Released 2018-10-24 · Red Hat rating Critical
    java-1.7.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el7 +3
  • RHSA-2018:3000 Released 2018-10-24 · Red Hat rating Critical
    java-1.7.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-devel-1:1.7.0.201-1jpp.1.el6, java-1.7.0-oracle-javafx-1:1.7.0.201-1jpp.1.el6 +3
  • RHSA-2018:3008 Released 2018-10-24 · Red Hat rating Important
    java-1.6.0-sun security update
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6 +3
  • RHSA-2018:3007 Released 2018-10-24 · Red Hat rating Important
    java-1.6.0-sun security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7 +3

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Oracle Java for Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2018:3001, RHSA-2018:3002, RHSA-2018:3007
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)Fixed RHSA-2018:3001, RHSA-2018:3002, RHSA-2018:3007
Oracle Java for Red Hat Enterprise Linux Desktop 6Fixed RHSA-2018:3000, RHSA-2018:3003, RHSA-2018:3008
Oracle Java for Red Hat Enterprise Linux HPC Node 6Fixed RHSA-2018:3000, RHSA-2018:3003, RHSA-2018:3008
Oracle Java for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:3001, RHSA-2018:3002, RHSA-2018:3007
Oracle Java for Red Hat Enterprise Linux Server 6Fixed RHSA-2018:3000, RHSA-2018:3003, RHSA-2018:3008
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:3001, RHSA-2018:3002, RHSA-2018:3007
Oracle Java for Red Hat Enterprise Linux Workstation 6Fixed RHSA-2018:3000, RHSA-2018:3003, RHSA-2018:3008
Red Hat Enterprise Linux Client Supplementary (v. 7)Fixed RHSA-2018:3534, RHSA-2018:3672
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)Fixed RHSA-2018:3534, RHSA-2018:3672
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2018:3533, RHSA-2018:3671
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2018:3533, RHSA-2018:3671
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2018:3533, RHSA-2018:3671
Red Hat Enterprise Linux Server Supplementary (v. 7)Fixed RHSA-2018:3534, RHSA-2018:3672
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2018:3533, RHSA-2018:3671
Red Hat Enterprise Linux Workstation Supplementary (v. 7)Fixed RHSA-2018:3534, RHSA-2018:3672
Red Hat Satellite 5.6 (RHEL v.6)Fixed RHSA-2018:3779
Red Hat Satellite 5.7 (RHEL v.6)Fixed RHSA-2018:3779
Red Hat Satellite 5.8 (RHEL v.6)Fixed RHSA-2018:3852
Not affected: 5 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Virtualization 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-13785
  2. 2026-10-03 Alias added: GHSA-fj59-ccrm-8h5w

References

Patch 2

Advisory 16

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences