The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade jasper-develUpgrade jasperUpgrade jasper-debuginfoUpgrade jasper-libsUpgrade jasper-utils | Apr 27, 2020 | Mar 23, 2017 |
| Centos_linux | — | Upgrade jasper-utilsUpgrade jasper-debuginfoUpgrade jasperUpgrade jasper-libsUpgrade jasper-devel | Aug 28, 2019 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade jasper-libs | Dec 31, 2018 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Dec 11, 2018 | Mar 23, 2017 |
| Oracle_linux | — | Upgrade jasper-utilsUpgrade jasper-develUpgrade jasperUpgrade jasper-libs | Nov 6, 2018 | Nov 16, 2016 |
| Redhat_linux | — | No solution existsUpgrade jasper-libsUpgrade jasper-debuginfoUpgrade jasper-utilsUpgrade jasper-develUpgrade jasper | Oct 31, 2018 | Mar 23, 2017 |
| Suse | — | Upgrade libjasper1-32bitUpgrade libjasper1Upgrade libjasper-develUpgrade libjasper4-32bitUpgrade jasperUpgrade libjasper4 | May 3, 2019 | Mar 23, 2017 |
| Ubuntu | — | Upgrade libjasper1 | Jul 3, 2018 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub