There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jasper-libsUpgrade jasper-devel | May 4, 2022 | Dec 11, 2020 |
| Amazon Linux Ami 2 | — | Upgrade jasperUpgrade jasper-debuginfoUpgrade jasper-utilsUpgrade jasper-libsUpgrade jasper-devel | Apr 21, 2023 | Dec 11, 2020 |
| Amazon_linux | — | Upgrade jasper | Apr 21, 2023 | Dec 11, 2020 |
| Centos_linux | — | Upgrade jasper-libsUpgrade jasper-utils-debuginfoUpgrade jasper-debuginfoUpgrade jasper-debugsourceUpgrade jasper-libs-debuginfo | Nov 10, 2021 | Dec 11, 2020 |
| Freebsd | — | Upgrade jasper | Dec 14, 2020 | Dec 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade jasper-libs | Feb 22, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Jan 20, 2021 | Dec 11, 2020 |
| Oracle_linux | — | Upgrade jasper-develUpgrade jasper-libs | Nov 17, 2021 | Nov 30, 2020 |
| Redhat_linux | — | No solution existsUpgrade jasper-libs-debuginfoUpgrade jasper-libsUpgrade jasper-debuginfoUpgrade jasper-utils-debuginfoUpgrade jasper-debugsourceUpgrade jasper-devel | Nov 10, 2021 | Dec 11, 2020 |
| Rocky_linux | — | Upgrade jasper-libs-debuginfoUpgrade jasper-libsUpgrade jasper-debuginfoUpgrade jasper-devel | Mar 12, 2024 | Dec 11, 2020 |
| Suse | — | Upgrade libjasper1Upgrade libjasper4Upgrade libjasper-32bitUpgrade libjasper1-32bitUpgrade libjasper4-32bitUpgrade libjasper-develUpgrade libjasperUpgrade jasper | Feb 17, 2021 | Dec 11, 2020 |
| Ubuntu | — | Upgrade libjasper1 | Jan 12, 2021 | Dec 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub