There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jasper-libsUpgrade jasper-devel | May 4, 2022 | Dec 11, 2020 |
| Amazon Linux Ami 2 | — | Upgrade jasper-libsUpgrade jasper-develUpgrade jasper-utilsUpgrade jasper-debuginfoUpgrade jasper | Apr 21, 2023 | Dec 11, 2020 |
| Amazon_linux | — | Upgrade jasper | Apr 21, 2023 | Dec 11, 2020 |
| Centos_linux | — | Upgrade jasper-libs-debuginfoUpgrade jasper-debugsourceUpgrade jasper-debuginfoUpgrade jasper-libsUpgrade jasper-utils-debuginfo | Nov 10, 2021 | Dec 11, 2020 |
| Freebsd | — | Upgrade jasper | Dec 14, 2020 | Dec 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade jasper-libs | Feb 22, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Jan 20, 2021 | Dec 11, 2020 |
| Oracle_linux | — | Upgrade jasper-develUpgrade jasper-libs | Nov 17, 2021 | Nov 30, 2020 |
| Redhat_linux | — | Upgrade jasper-debuginfoUpgrade jasper-debugsourceUpgrade jasper-utils-debuginfoUpgrade jasper-develUpgrade jasper-libsNo solution existsUpgrade jasper-libs-debuginfo | Nov 10, 2021 | Dec 11, 2020 |
| Rocky_linux | — | Upgrade jasper-libsUpgrade jasper-libs-debuginfoUpgrade jasper-develUpgrade jasper-debuginfo | Mar 12, 2024 | Dec 11, 2020 |
| Suse | — | Upgrade libjasper-develUpgrade libjasperUpgrade jasperUpgrade libjasper4-32bitUpgrade libjasper-32bitUpgrade libjasper1-32bitUpgrade libjasper1Upgrade libjasper4 | Feb 17, 2021 | Dec 11, 2020 |
| Ubuntu | — | Upgrade libjasper1 | Jan 12, 2021 | Dec 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub