Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-1628-1:5687C
HistoryJan 02, 2019 - 10:57 p.m.

[SECURITY] [DLA 1628-1] jasper security update

2019-01-0222:57:11
lists.debian.org
48

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

55.9%

JSON

Package : jasper
Version : 1.900.1-debian1-2.4+deb8u5
CVE ID : CVE-2018-18873 CVE-2018-19139 CVE-2018-19539
CVE-2018-19540 CVE-2018-19541 CVE-2018-19542
CVE-2018-20570 CVE-2018-20584 CVE-2018-20622

Multiple issues were found in the JasPer JPEG-2000 library that could
lead to a denial-of-service (application crash), memory leaks and
potentially the execution of arbitrary code if a malformed image file
is processed.

For Debian 8 "Jessie", these problems have been fixed in version
1.900.1-debian1-2.4+deb8u5.

We recommend that you upgrade your jasper packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian8armhflibjasper1< 1.900.1-debian1-2.4+deb8u5libjasper1_1.900.1-debian1-2.4+deb8u5_armhf.deb
Debian8i386libjasper-dev< 1.900.1-debian1-2.4+deb8u5libjasper-dev_1.900.1-debian1-2.4+deb8u5_i386.deb
Debian8amd64libjasper1< 1.900.1-debian1-2.4+deb8u5libjasper1_1.900.1-debian1-2.4+deb8u5_amd64.deb
Debian8i386libjasper-runtime< 1.900.1-debian1-2.4+deb8u5libjasper-runtime_1.900.1-debian1-2.4+deb8u5_i386.deb
Debian8amd64libjasper-runtime< 1.900.1-debian1-2.4+deb8u5libjasper-runtime_1.900.1-debian1-2.4+deb8u5_amd64.deb
Debian8armellibjasper-runtime< 1.900.1-debian1-2.4+deb8u5libjasper-runtime_1.900.1-debian1-2.4+deb8u5_armel.deb
Debian8armellibjasper1< 1.900.1-debian1-2.4+deb8u5libjasper1_1.900.1-debian1-2.4+deb8u5_armel.deb
Debian8armhflibjasper-runtime< 1.900.1-debian1-2.4+deb8u5libjasper-runtime_1.900.1-debian1-2.4+deb8u5_armhf.deb
Debian8i386libjasper1< 1.900.1-debian1-2.4+deb8u5libjasper1_1.900.1-debian1-2.4+deb8u5_i386.deb
Debian8armhflibjasper-dev< 1.900.1-debian1-2.4+deb8u5libjasper-dev_1.900.1-debian1-2.4+deb8u5_armhf.deb
Rows per page:
1-10 of 131

Related

osv 11
openvas 23
nessus 22
suse 5
mageia 3
ibm 4
ubuntu 1
freebsd 1
redhatcve 9
cve 9
prion 9
ubuntucve 9
veracode 5
debian 1
gentoo 1
oracle 2
osv
osv
jasper - security update
2019-01-02 00:00:00
jasper vulnerabilities
2021-01-11 12:42:31
CVE-2018-20584
2018-12-30 05:29:01
openvas
openvas
Debian: Security Advisory (DLA-1628-1)
2019-01-02 00:00:00
Huawei EulerOS: Security Advisory for jasker (EulerOS-SA-2021-1044)
2021-01-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2513-1)
2021-04-19 00:00:00
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.2.0 : jasker (EulerOS-SA-2021-1044)
2021-01-05 00:00:00
SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2019:2513-1)
2019-10-03 00:00:00
SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2019:2512-1)
2019-10-03 00:00:00
suse
suse
Security update for jasper (moderate)
2019-10-07 00:00:00
Security update for jasper (moderate)
2019-10-07 00:00:00
Security update for jasper (moderate)
2019-05-03 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2019-12-13 21:25:24
Updated jasper packages fix security vulnerabilities
2019-05-12 12:35:33
Updated jasper packages fix security vulnerabilities
2020-08-18 23:43:16
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Change is deployed
2020-03-30 09:06:54
Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed
2020-12-22 18:18:53
Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities
2022-11-01 18:28:47
ubuntu
ubuntu
JasPer vulnerabilities
2021-01-11 00:00:00
freebsd
freebsd
jasper -- multiple vulnerabilities
2020-07-28 00:00:00
redhatcve
redhatcve
CVE-2018-19539
2020-03-02 01:29:24
CVE-2018-20570
2020-01-19 21:41:34
CVE-2018-20584
2019-01-09 21:52:00
cve
cve
CVE-2018-19542
2018-11-26 03:29:00
CVE-2018-19139
2018-11-09 21:29:00
CVE-2018-20570
2018-12-28 16:29:00
prion
prion
Format string
2018-12-30 05:29:00
Memory corruption
2018-12-31 19:29:00
Null pointer dereference
2018-10-31 16:29:00
ubuntucve
ubuntucve
CVE-2018-19139
2018-11-09 00:00:00
CVE-2018-20622
2018-12-31 00:00:00
CVE-2018-18873
2018-10-31 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-06-07 03:28:00
Denial Of Service (DoS)
2018-11-01 08:15:29
Denial Of Service (DoS)
2019-06-07 03:22:12
debian
debian
[SECURITY] [DLA 1628-2] jasper regression update
2019-04-13 21:32:52
gentoo
gentoo
JasPer: Multiple vulnerabilities
2019-08-09 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

55.9%

JSON
Related for DEBIAN:DLA-1628-1:5687C
osv11openvas23nessus22suse5mageia3ibm4ubuntu1freebsd1redhatcve9cve9prion9ubuntucve9veracode5debian1gentoo1oracle2