High severity7.5NVD Advisory· Published Aug 29, 2017· Updated May 13, 2026
CVE-2017-13745
CVE-2017-13745
Description
There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154.
Affected products
1- cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- www.securityfocus.com/bid/100514nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/nvd
- security.gentoo.org/glsa/201908-03nvd
- www.oracle.com/security-alerts/cpuapr2020.htmlnvd
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlnvd
News mentions
0No linked articles in our index yet.