JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jasper | Sep 20, 2017 | Jul 13, 2017 |
| Amazon Linux Ami 2 | — | Upgrade jasper-libsUpgrade jasper-utilsUpgrade jasper-debuginfoUpgrade jasper-develUpgrade jasper | Apr 27, 2020 | Jul 17, 2017 |
| Centos_linux | — | Upgrade jasper-libsUpgrade jasperUpgrade jasper-utilsUpgrade jasper-develUpgrade jasper-debuginfo | Aug 28, 2019 | Jul 17, 2017 |
| Gentoo Linux | — | Upgrade media-libs/jasper. | Aug 13, 2019 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade jasper-libs | Dec 31, 2018 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Dec 11, 2018 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade jasperUpgrade jasper-utilsUpgrade jasper-libsUpgrade jasper-devel | Nov 6, 2018 | Mar 5, 2017 |
| Redhat_linux | — | Upgrade jasper-utilsUpgrade jasper-libsNo solution existsUpgrade jasper-develUpgrade jasper-debuginfoUpgrade jasper | Oct 31, 2018 | Jul 17, 2017 |
| Suse | — | Upgrade libjasper-x86Upgrade libjasperUpgrade libjasper-develUpgrade libjasper-32bitUpgrade libjasper1-32bitUpgrade libjasper1Upgrade libjasper4 | Jul 21, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade libjasper1 | Jul 3, 2018 | Jul 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub