CVE-2018-20622

🗓️ 31 Dec 2018 19:29:00Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 13 Views

JasPer 2.0.14 memory leak in libjasper.a when using "--output-format jp2

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed	22 Dec 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Change is deployed	30 Mar 202009:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Engineering Requirements Management DOORS Next	18 Jun 202021:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
FreeBSD	jasper -- multiple vulnerabilities	28 Jul 202000:00	–	freebsd
BDU FSTEC	The vulnerability of the libjasper.a file, a collection of JasPer libraries, allows attackers to trigger a service failure.	26 May 202000:00	–	bdu_fstec
CVE	CVE-2018-20622	31 Dec 201819:00	–	cve
Cvelist	CVE-2018-20622	31 Dec 201819:00	–	cvelist
Debian	[SECURITY] [DLA 1628-1] jasper security update	2 Jan 201922:57	–	debian
EUVD	EUVD-2018-13173	7 Oct 202500:30	–	euvd

NVD

Node

jasper_project jasperMatch2.0.14

Node

debian debian_linuxMatch8.0

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
lists	www.lists.debian.org/debian-lts-announce/2019/01/msg00003.html
github	www.github.com/mdadams/jasper/issues/193
oracle	www.oracle.com/security-alerts/cpuapr2020.html
securityfocus	www.securityfocus.com/bid/106373
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html

06 May 2025 17:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 36.5

CVSS 3.16.5

EPSS0.01283

jasper memory leak libjasper.a output format jp2