vulnerability

Ubuntu: USN-3693-1 (CVE-2015-5221): JasPer vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Nov 5, 2016

Added

Jul 3, 2018

Modified

Mar 27, 2026

Description

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

Solution

ubuntu-upgrade-libjasper1

References

CVE-2015-5221
https://attackerkb.com/topics/CVE-2015-5221
CWE-416
EUVD-EUVD-2015-5218
NVD-CVE-2015-5221
UBUNTU-USN-3693-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-5218

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report