Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3443

Опубликовано: 25 мар. 2021
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*
Версия до 2.0.27 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

EPSS

Процентиль: 10%
0.00036
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 5 лет назад

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

CVSS3: 5.5
redhat
почти 5 лет назад

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

CVSS3: 5.5
msrc
около 4 лет назад

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

CVSS3: 5.5
debian
почти 5 лет назад

A NULL pointer dereference flaw was found in the way Jasper versions b ...

github
больше 3 лет назад

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

EPSS

Процентиль: 10%
0.00036
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476