vulnerability

FreeBSD: VID-6842ac7e-d250-11ea-b9b7-08002728f74c (CVE-2017-5503): jasper -- multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Aug 25, 2020

Added

Aug 26, 2020

Modified

Jun 15, 2026

Description

The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.

Solution

freebsd-upgrade-package-jasper

References

CVE-2017-5503
https://attackerkb.com/topics/CVE-2017-5503
CWE-787
EUVD-EUVD-2017-14607
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14607

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report