rpm package
suse/jasper&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3
pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3
Vulnerabilities (12)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-3272 | — | < 1.900.14-195.25.1 | 1.900.14-195.25.1 | Jan 27, 2021 | jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components. | ||
| CVE-2020-27828 | — | < 1.900.14-195.25.1 | 1.900.14-195.25.1 | Dec 11, 2020 | There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability. | ||
| CVE-2018-9055 | — | < 1.900.14-195.8.1 | 1.900.14-195.8.1 | Mar 27, 2018 | JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c. | ||
| CVE-2017-1000050 | Hig | 7.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Jul 17, 2017 | JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service. | |
| CVE-2016-9394 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9393 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9392 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9391 | Hig | 7.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. | |
| CVE-2016-9390 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | |
| CVE-2016-9389 | Hig | 7.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure). | |
| CVE-2016-9388 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | |
| CVE-2016-9262 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. |
- CVE-2021-3272Jan 27, 2021affected < 1.900.14-195.25.1fixed 1.900.14-195.25.1
jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.
- CVE-2020-27828Dec 11, 2020affected < 1.900.14-195.25.1fixed 1.900.14-195.25.1
There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
- CVE-2018-9055Mar 27, 2018affected < 1.900.14-195.8.1fixed 1.900.14-195.8.1
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.