Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqg5-576j-g363

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

EPSS

Процентиль: 86%
0.02975
Низкий

5.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.7
ubuntu
больше 10 лет назад

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

CVSS3: 3.3
redhat
больше 10 лет назад

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

CVSS3: 5.7
nvd
больше 10 лет назад

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

CVSS3: 5.7
debian
больше 10 лет назад

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900. ...

suse-cvrf
больше 9 лет назад

Security update for jasper

EPSS

Процентиль: 86%
0.02975
Низкий

5.7 Medium

CVSS3