The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-jasperamazon-linux-ami-2-upgrade-jasper-debuginfoamazon-linux-ami-2-upgrade-jasper-develamazon-linux-ami-2-upgrade-jasper-libsamazon-linux-ami-2-upgrade-jasper-utils | Apr 27, 2020 | Mar 23, 2017 | |
| Centos_linux | — | centos-upgrade-jaspercentos-upgrade-jasper-debuginfocentos-upgrade-jasper-develcentos-upgrade-jasper-libscentos-upgrade-jasper-utils | Aug 28, 2019 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-jasper-libs | Dec 31, 2018 | Mar 23, 2017 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-jasper-libs | Dec 11, 2018 | Mar 23, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-jasperoracle-linux-upgrade-jasper-develoracle-linux-upgrade-jasper-libsoracle-linux-upgrade-jasper-utils | Nov 6, 2018 | Nov 16, 2016 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-jasperredhat-upgrade-jasper-debuginforedhat-upgrade-jasper-develredhat-upgrade-jasper-libsredhat-upgrade-jasper-utils | Oct 31, 2018 | Mar 23, 2017 | |
| Suse | — | suse-upgrade-jaspersuse-upgrade-libjasper-develsuse-upgrade-libjasper1suse-upgrade-libjasper1-32bitsuse-upgrade-libjasper4suse-upgrade-libjasper4-32bit | May 3, 2019 | Mar 23, 2017 |
| Ubuntu | ubuntu-upgrade-libjasper1 | Jul 3, 2018 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub