JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jasper | Sep 20, 2017 | Jul 13, 2017 |
| Amazon Linux Ami 2 | — | Upgrade jasper-utilsUpgrade jasper-develUpgrade jasper-debuginfoUpgrade jasperUpgrade jasper-libs | Apr 27, 2020 | Jul 17, 2017 |
| Centos_linux | — | Upgrade jasper-develUpgrade jasper-debuginfoUpgrade jasperUpgrade jasper-utilsUpgrade jasper-libs | Aug 28, 2019 | Jul 17, 2017 |
| Gentoo Linux | — | Upgrade media-libs/jasper. | Aug 13, 2019 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade jasper-libs | Dec 31, 2018 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Dec 11, 2018 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade jasperUpgrade jasper-utilsUpgrade jasper-libsUpgrade jasper-devel | Nov 6, 2018 | Mar 5, 2017 |
| Redhat_linux | — | Upgrade jasper-libsUpgrade jasper-utilsUpgrade jasperUpgrade jasper-develNo solution existsUpgrade jasper-debuginfo | Oct 31, 2018 | Jul 17, 2017 |
| Suse | — | Upgrade libjasper4Upgrade libjasper1Upgrade libjasper-develUpgrade libjasper-32bitUpgrade libjasperUpgrade libjasper-x86Upgrade libjasper1-32bit | Jul 21, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade libjasper1 | Jul 3, 2018 | Jul 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub