Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-9782

Опубликовано: 21 июн. 2017
Источник: debian
EPSS Низкий

Описание

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
jasperremovedpackage
jasperno-dsajessiepackage
jasperno-dsawheezypackage

Примечания

  • https://github.com/mdadams/jasper/issues/140

EPSS

Процентиль: 60%
0.00396
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 9 лет назад

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.

CVSS3: 4.3
redhat
почти 9 лет назад

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.

CVSS3: 5.5
nvd
почти 9 лет назад

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.

CVSS3: 5.5
github
почти 4 года назад

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.

suse-cvrf
больше 5 лет назад

Security update for jasper

EPSS

Процентиль: 60%
0.00396
Низкий