Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-19539

Опубликовано: 13 июл. 2018
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.

A vulnerability was found in JasPer due to an access violation in the jas_image_readcmpt function within libjasper/base/jas_image.c, where an attacker could exploit this flaw by persuading a victim to open a specially crafted file, causing the application to crash and resulting in a denial of service condition.

Отчет

This vulnerability was rated as LOW severity because it requires the victim to open a specially crafted file. While it doesn’t allow full system compromise, it can cause the application to crash temporarily.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5netpbmNot affected
Red Hat Enterprise Linux 6jasperWill not fix
Red Hat Enterprise Linux 7jasperFix deferred
Red Hat Enterprise Linux 8jasperFix deferred
Red Hat Enterprise Linux 8mingw-jasperFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1658773jasper: access violation in jas_image_readcmpt() in jas_image.c

EPSS

Процентиль: 80%
0.0206
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.

CVSS3: 6.5
nvd
больше 7 лет назад

An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.

CVSS3: 6.5
debian
больше 7 лет назад

An issue was discovered in JasPer 2.0.14. There is an access violation ...

CVSS3: 6.5
github
больше 4 лет назад

An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.

suse-cvrf
больше 7 лет назад

Security update for jasper

EPSS

Процентиль: 80%
0.0206
Низкий

3.3 Low

CVSS3