CVE-2017-13750

There is a reachable assertion abort in the function jpcdecprocesssiz in jpc/jpcdec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13752

There is a reachable assertion abort in the function jpcdequantize in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13748

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jasstrdup in base/jasstring.c, that will lead to a remote denial of service attack...

CVE-2017-13749

There is a reachable assertion abort in the function jpcpinextrpcl in jpc/jpct2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

JasPer Denial of Service Vulnerability (CNVD-2017-25451)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer version 2.0.13. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read and...

CVE-2017-14132

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6,...

CVE-2017-14132

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6,...

Heap overflow

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6,...

CVE-2017-14132

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6,...

UBUNTU-CVE-2017-14132

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6,...

CVE-2017-14132

CVE-2017-14132 affects JasPer 1.900.8–1.900.31 and 2.0.0–2.0.16. A crafted image can trigger a heap-based buffer over-read in the function jas_image_ishomosamp (libjasper/base/jas_image.c), allowing remote attackers to cause an application crash (denial of service). The vulnerability is triggered...

CVE-2017-14132

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6,...

JasPer Denial of Service Vulnerability (CNVD-2017-25692)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdecprocesssiz function in jpc/jpcdec.c:1297 in JasPer, which can be exploited by a remo...

JasPer Denial of Service Vulnerability (CNVD-2017-25688)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdecprocesssiz function in jpc/jpcdec.c:1296 in JasPer, which can be exploited by a remo...

JasPer Denial of Service Vulnerability (CNVD-2017-25685)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer, which can be exploited by a remote...

JasPer Denial of Service Vulnerability (CNVD-2017-25693)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdecprocesssot function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...

JasPer Denial of Service Vulnerability (CNVD-2017-25686)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdequantize function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...

JasPer Denial of Service Vulnerability (CNVD-2017-25689)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcpinextrpcl function in jpc/jpct2cod.c in JasPer, which can be exploited by a remote...

JasPer Denial of Service Vulnerability (CNVD-2017-25691)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcfloorlog2 function in jpc/jpcmath.c in JasPer, which can be exploited by a remote...

JasPer Denial of Service Vulnerability (CNVD-2017-25687)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the calcstepsizes function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...