Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1420-1

Опубликовано: 26 мая 2020
Источник: suse-cvrf

Описание

Security update for jasper

This update for jasper fixes the following issues:

  • CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP1
libjasper4-2.0.14-3.11.8
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
libjasper-devel-2.0.14-3.11.8

Ссылки

Описание

There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.11.8
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.11.8
Ссылки