There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-jasper-develalma-upgrade-jasper-libs | May 4, 2022 | Dec 11, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-jasperamazon-linux-ami-2-upgrade-jasper-debuginfoamazon-linux-ami-2-upgrade-jasper-develamazon-linux-ami-2-upgrade-jasper-libsamazon-linux-ami-2-upgrade-jasper-utils | Apr 21, 2023 | Dec 11, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-jasper | Apr 21, 2023 | Dec 11, 2020 |
| Centos_linux | — | centos-upgrade-jasper-debuginfocentos-upgrade-jasper-debugsourcecentos-upgrade-jasper-libscentos-upgrade-jasper-libs-debuginfocentos-upgrade-jasper-utils-debuginfo | Nov 10, 2021 | Dec 11, 2020 |
| Freebsd | freebsd-upgrade-package-jasper | Dec 14, 2020 | Dec 13, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-jasper-libs | Feb 22, 2021 | Dec 11, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-jasper-libs | Jan 20, 2021 | Dec 11, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-jasper-develoracle-linux-upgrade-jasper-libs | Nov 17, 2021 | Nov 30, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-jasper-debuginforedhat-upgrade-jasper-debugsourceredhat-upgrade-jasper-develredhat-upgrade-jasper-libsredhat-upgrade-jasper-libs-debuginforedhat-upgrade-jasper-utils-debuginfo | Nov 10, 2021 | Dec 11, 2020 | |
| Rocky_linux | rocky-upgrade-jasper-debuginforocky-upgrade-jasper-develrocky-upgrade-jasper-libsrocky-upgrade-jasper-libs-debuginfo | Mar 12, 2024 | Dec 11, 2020 | |
| Suse | — | suse-upgrade-jaspersuse-upgrade-libjaspersuse-upgrade-libjasper-32bitsuse-upgrade-libjasper-develsuse-upgrade-libjasper1suse-upgrade-libjasper1-32bitsuse-upgrade-libjasper4suse-upgrade-libjasper4-32bit | Feb 17, 2021 | Dec 11, 2020 |
| Ubuntu | ubuntu-upgrade-libjasper1 | Jan 12, 2021 | Dec 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub