CVE-2018-18873

Опубликовано: 31 окт. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
https://github.com/mdadams/jasper/issues/184
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201908-03
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
https://github.com/mdadams/jasper/issues/184
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201908-03
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jasper_project:jasper:2.0.14:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00445

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-18873

CVSS3: 5.5

ubuntu

больше 7 лет назад

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.

CVE-2018-18873

CVSS3: 5.5

redhat

больше 7 лет назад

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.

CVE-2018-18873

CVSS3: 5.5

debian

больше 7 лет назад

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dere ...

GHSA-q86v-48q4-7hr6

CVSS3: 5.5

github

больше 3 лет назад

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.

openSUSE-SU-2020:1523-1

suse-cvrf

больше 5 лет назад

Security update for jasper

EPSS

Процентиль: 63%

0.00445

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476