A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jasper-develUpgrade jasper-libs | May 4, 2022 | Feb 23, 2021 |
| Amazon Linux Ami 2 | — | Upgrade jasper-libsUpgrade jasper-utilsUpgrade jasperUpgrade jasper-develUpgrade jasper-debuginfo | Apr 21, 2023 | Feb 23, 2021 |
| Amazon_linux | — | Upgrade jasper | Apr 21, 2023 | Feb 23, 2021 |
| Centos_linux | — | Upgrade jasper-libs-debuginfoUpgrade jasper-debuginfoUpgrade jasper-utils-debuginfoUpgrade jasper-debugsourceUpgrade jasper-libs | Nov 10, 2021 | Feb 23, 2021 |
| Freebsd | — | Upgrade jasper | Mar 4, 2021 | Mar 3, 2021 |
| Oracle_linux | — | Upgrade jasper-develUpgrade jasper-libs | Nov 17, 2021 | Jan 29, 2021 |
| Redhat_linux | — | Upgrade jasper-libs-debuginfoUpgrade jasper-libsUpgrade jasper-develUpgrade jasper-debuginfoNo solution existsUpgrade jasper-debugsourceUpgrade jasper-utils-debuginfo | Nov 10, 2021 | Feb 23, 2021 |
| Rocky_linux | — | Upgrade jasper-libs-debuginfoUpgrade jasper-libsUpgrade jasper-debuginfoUpgrade jasper-devel | Mar 12, 2024 | Feb 23, 2021 |
| Suse | — | Upgrade jasperUpgrade libjasper4-32bitUpgrade libjasper1-32bitUpgrade libjasper4Upgrade libjasper-develUpgrade libjasper1 | Oct 26, 2022 | Feb 23, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub