JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jasper | Sep 20, 2017 | Jul 13, 2017 |
| Amazon Linux Ami 2 | — | Upgrade jasper-libsUpgrade jasper-debuginfoUpgrade jasper-develUpgrade jasperUpgrade jasper-utils | Apr 27, 2020 | Jul 17, 2017 |
| Centos_linux | — | Upgrade jasperUpgrade jasper-debuginfoUpgrade jasper-utilsUpgrade jasper-develUpgrade jasper-libs | Aug 28, 2019 | Jul 17, 2017 |
| Gentoo Linux | — | Upgrade media-libs/jasper. | Aug 13, 2019 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade jasper-libs | Dec 31, 2018 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Dec 11, 2018 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade jasperUpgrade jasper-develUpgrade jasper-libsUpgrade jasper-utils | Nov 6, 2018 | Mar 5, 2017 |
| Redhat_linux | — | Upgrade jasper-develUpgrade jasperNo solution existsUpgrade jasper-debuginfoUpgrade jasper-utilsUpgrade jasper-libs | Oct 31, 2018 | Jul 17, 2017 |
| Suse | — | Upgrade libjasper1-32bitUpgrade libjasper-32bitUpgrade libjasper-develUpgrade libjasperUpgrade libjasper-x86Upgrade libjasper4Upgrade libjasper1 | Jul 21, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade libjasper1 | Jul 3, 2018 | Jul 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub