Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-6850

Опубликовано: 15 мар. 2017
Источник: debian

Описание

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
jasperremovedpackage

Примечания

  • Upstream bug: https://github.com/mdadams/jasper/issues/112

  • https://www.openwall.com/lists/oss-security/2017/01/25/8

  • Not suitable for code injection, hardly denial of service

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 9 лет назад

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

CVSS3: 7
redhat
около 9 лет назад

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

CVSS3: 5.5
nvd
почти 9 лет назад

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

CVSS3: 5.5
github
больше 3 лет назад

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

suse-cvrf
почти 9 лет назад

Security update for jasper