Описание
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
A vulnerability was found in JasPer where a memory leak occurs in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c where, an attacker could exploit this flaw by persuading a victim to open a specially crafted file, causing excessive memory consumption and eventually crashing the application.
Отчет
This vulnerability was rated as LOW severity because it requires a specially crafted file to exploit, leading to a memory leak. While it doesn't cause immediate security compromise, it can cause the application to crash due to excessive memory usage.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | netpbm | Out of support scope | ||
| Red Hat Enterprise Linux 6 | jasper | Out of support scope | ||
| Red Hat Enterprise Linux 7 | jasper | Will not fix | ||
| Red Hat Enterprise Linux 8 | jasper | Fix deferred | ||
| Red Hat Enterprise Linux 8 | mingw-jasper | Fix deferred |
Показывать по
Дополнительная информация
Статус:
3.3 Low
CVSS3
Связанные уязвимости
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
An issue has been found in JasPer 2.0.14. There is a memory leak in ja ...
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
3.3 Low
CVSS3