High severity7.5NVD Advisory· Published Aug 29, 2017· Updated May 13, 2026
CVE-2017-13748
CVE-2017-13748
Description
There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.
Affected products
4- cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- www.securityfocus.com/bid/100514nvdThird Party AdvisoryVDB Entry
- lists.debian.org/debian-lts-announce/2018/11/msg00023.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/201908-03nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/nvd
News mentions
0No linked articles in our index yet.