Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0488-1

Опубликовано: 16 фев. 2021
Источник: suse-cvrf

Описание

Security update for jasper

This update for jasper fixes the following issues:

  • bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  • bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode

Список пакетов

SUSE Enterprise Storage 6
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise Module for Basesystem 15 SP2
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
libjasper-devel-2.0.14-3.19.1
SUSE Linux Enterprise Server 15 SP1-BCL
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise Server 15 SP1-LTSS
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise Server 15-LTSS
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise Server for SAP Applications 15
libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Manager Proxy 4.0
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Manager Retail Branch Server 4.0
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1
SUSE Manager Server 4.0
libjasper-devel-2.0.14-3.19.1
libjasper4-2.0.14-3.19.1

Ссылки

Описание

There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.

Затронутые продукты
SUSE Enterprise Storage 6:libjasper-devel-2.0.14-3.19.1
SUSE Enterprise Storage 6:libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libjasper-devel-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libjasper4-2.0.14-3.19.1
Ссылки

Описание

jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.

Затронутые продукты
SUSE Enterprise Storage 6:libjasper-devel-2.0.14-3.19.1
SUSE Enterprise Storage 6:libjasper4-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libjasper-devel-2.0.14-3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libjasper4-2.0.14-3.19.1
Ссылки
Уязвимость SUSE-SU-2021:0488-1