rpm package
suse/jasper&distro=SUSE Linux Enterprise Software Development Kit 12 SP3
pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
Vulnerabilities (10)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-9055 | — | < 1.900.14-195.8.1 | 1.900.14-195.8.1 | Mar 27, 2018 | JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c. | ||
| CVE-2017-1000050 | Hig | 7.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Jul 17, 2017 | JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service. | |
| CVE-2016-9394 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9393 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9392 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9391 | Hig | 7.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. | |
| CVE-2016-9390 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | |
| CVE-2016-9389 | Hig | 7.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure). | |
| CVE-2016-9388 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | |
| CVE-2016-9262 | Med | 5.5 | < 1.900.14-195.5.1 | 1.900.14-195.5.1 | Mar 23, 2017 | Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. |
- CVE-2018-9055Mar 27, 2018affected < 1.900.14-195.8.1fixed 1.900.14-195.8.1
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- affected < 1.900.14-195.5.1fixed 1.900.14-195.5.1
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.