CVE-2014-8137: jasper_project jasper

EPSS trend

Probability

14.55%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.55% on 18-09-2026

18-09-202618-10-2026

EPSS score

14.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

27 links

www.mandriva.com/security/advisories?name=MDVSA-2015:012Vendor AdvisoryX Refsource MANDRIVA
www.debian.org/security/2014/dsa-3106Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/62619Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-updates/2015-01/msg00013.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-updates/2015-01/msg00017.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/61747Third Party AdvisoryX Refsource SECUNIA
packetstormsecurity.com/files/129660/JasPer-1.900.1-Double-Free-Heap-Overflow.htmlX Refsource MISC
www.ubuntu.com/usn/USN-2483-2Vendor AdvisoryX Refsource UBUNTU
www.ubuntu.com/usn/USN-2483-1Vendor AdvisoryX Refsource UBUNTU
www.ocert.org/advisories/ocert-2014-012.htmlX Refsource MISCThird Party AdvisoryUS Government Resource

Show all 27 references

secunia.com/advisories/62615Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id/1033459VDB EntryX Refsource SECTRACK
rhn.redhat.com/errata/RHSA-2015-0698.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-updates/2015-01/msg00014.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/62311Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2014-2021.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/71742VDB EntryX Refsource BID
advisories.mageia.org/MGASA-2014-0539.htmlX Refsource CONFIRM
www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606Vendor AdvisoryX Refsource SLACKWARE
www.mandriva.com/security/advisories?name=MDVSA-2015:159Vendor AdvisoryX Refsource MANDRIVA
rhn.redhat.com/errata/RHSA-2015-1713.htmlVendor AdvisoryX Refsource REDHAT
ubuntu.com/security/CVE-2014-8137REPORT
www.ocert.org/advisories/ocert-2014-012.htmlREPORT
www.debian.org/security/2014/dsa-3106REPORT
ubuntu.com/security/notices/USN-2483-1Advisory
ubuntu.com/security/notices/USN-2483-2Advisory
www.cve.org/CVERecord?id=CVE-2014-8137REPORT

Related vulnerabilities

CVE-2018-16850alpinepostgresql+395.15%7y ago13-11-2018 15:00postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.CVE-2018-16395alpineruby+2610.71%7y ago16-11-2018 18:00An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.CVE-2018-16396alpineruby+247.97%7y ago16-11-2018 18:00An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.CVE-2018-16866chainguardpy3-systemd+271.05%7y ago11-01-2019 19:00An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.CVE-2018-1283apache software foundationapache http server+119.74%8y ago26-03-2018 15:00In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

All vulnerabilities injasper enterprise_linux

CVE-2014-8137: jasper_project jasper

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References