Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0734-1

Опубликовано: 29 мая 2020
Источник: suse-cvrf

Описание

Security update for jasper

This update for jasper fixes the following issues:

  • CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
jasper-2.0.14-lp151.4.6.1
libjasper-devel-2.0.14-lp151.4.6.1
libjasper4-2.0.14-lp151.4.6.1
libjasper4-32bit-2.0.14-lp151.4.6.1

Ссылки

Описание

There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.

Затронутые продукты
openSUSE Leap 15.1:jasper-2.0.14-lp151.4.6.1
openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.6.1
openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.6.1
openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.6.1
Ссылки