Jasper Project Jasper vulnerabilities, page 5

101 vulnerabilities

Known vulnerabilities in Jasper Project Jasper, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2017-13752fedoraproject · fedora +1 morefedoraproject fedoraThere is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.EPSS3.62%7.5HighCVE-2017-13745ubuntu · jasper +1 moreubuntu jasperThere is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154.EPSS3.94%7.5HighCVE-2017-13751fedoraproject · fedora +1 morefedoraproject fedoraThere is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.EPSS3.62%7.5HighCVE-2017-13746fedoraproject · fedora +1 morefedoraproject fedoraThere is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack.EPSS4.03%7.5HighCVE-2017-1000050Alpine Linuxalpine · jasper +7 morealpine jasperJasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.EPSS3.25%5.5MediumCVE-2017-9782ubuntu · jasper +1 moreubuntu jasperJasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.EPSS1.55%6.5MediumCVE-2017-14132ubuntu · jasper +2 moreubuntu jasperJasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.EPSS2.23%5.5MediumCVE-2017-14232flif +1 moreflif flifThe read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.EPSS1.16%7.5HighCVE-2017-14229jasper_project · jasperjasper_project jasperThere is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack.EPSS3.00%5.5MediumCVE-2017-5501ubuntu · jasper +1 moreubuntu jasperInteger overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.EPSS1.37%5.5MediumCVE-2017-5502ubuntu · jasper +1 moreubuntu jasperlibjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.EPSS1.33%5.5MediumCVE-2017-5503jasper_project · jasperjasper_project jasperThe dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.EPSS1.76%5.5MediumCVE-2017-5505jasper_project · jasperjasper_project jasperThe jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.EPSS2.07%5.5MediumCVE-2017-5504ubuntu · jasper +1 moreubuntu jasperThe jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.EPSS1.61%5.5MediumCVE-2017-5499ubuntu · jasper +1 moreubuntu jasperInteger overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.EPSS1.37%5.5MediumCVE-2017-5500ubuntu · jasper +1 moreubuntu jasperlibjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.EPSS1.37%5.5MediumCVE-2017-5498ubuntu · jasper +1 moreubuntu jasperlibjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.EPSS1.08%5.5MediumCVE-2017-6851jasper_project · jasperjasper_project jasperThe jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image.EPSS1.57%7.8HighCVE-2017-6852ubuntu · jasper +1 moreubuntu jasperHeap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image.EPSS1.87%5.5MediumCVE-2017-6850ubuntu · jasper +1 moreubuntu jasperThe jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.EPSS1.76%