CVE-2017-14132: debian debian_linux Out-of-bounds Read

Vulnerability summary

CVE-2017-14132 is a medium (CVSS 6.5) Out-of-bounds Read vulnerability in debian debian_linux. EPSS estimates a 2.23% chance of exploitation in the next 30 days, higher than 82.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 04-09-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.