CVE-2017-5502

libjasper/jp2/jp2dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

CVE-2017-5501

Integer overflow in libjasper/jpc/jpctsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-5502

CVE-2017-5502 affects JasPer 1.900.17: libjasper/jp2/jp2_dec.c allows remote attackers to crash the process via left-shift of a negative value (denial of service). Details across connected sources confirm the vulnerable component/version and the crash impact; no patch/mitigation is provided in th...

CVE-2017-5503

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...

CVE-2017-5503

CVE-2017-5503 affects JasPer library (JasPer 1.900.27) in the dec_clnpass path (libjasper/jpc/jpc_t1dec.c). A crafted image can trigger a denial of service via an invalid memory write, potentially with additional impact. Connected advisories confirm the same vulnerability across multiple vendor f...

CVE-2017-5503

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...

CVE-2017-5499

Integer overflow in libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-5498

CVE-2017-5498 affects JasPer 1.900.17 (libjasper) via a flaw in jas_math.h where left-shifting a negative value triggers a denial of service (crash). Connected sources confirm this CVE is addressed by security updates in various Linux/SUSE/OpenSUSE advisories (e.g., openSUSE/SLES/SUSE updates) th...

CVE-2017-5502

libjasper/jp2/jp2dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

CVE-2017-5500

libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

PT-2017-16543

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.27 Description The issue is related to the dec clnpass function in libjasper/jpc/jpc t1dec.c, which allows remote attackers to cause a denial of service, resulting in an invalid memory write and crash, or possibly have oth...

PT-2017-16544

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.27 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash, via a crafted image. This is due to a problem in the jpc undo roi function. Recommendations For...

CVE-2017-5500: Undefined Security Weakness

libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

CVE-2017-5498: Undefined Security Weakness

libjasper/include/jasper/jasmath.h in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

CVE-2017-5502: Undefined Security Weakness

libjasper/jp2/jp2dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

PT-2017-16542

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving left shift of a negative value in the libjasper/jp2/jp2 dec.c file...

CVE-2017-5501: Integer Overflow or Wraparound

Integer overflow in libjasper/jpc/jpctsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-5499: Integer Overflow or Wraparound

Integer overflow in libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

PT-2017-16541

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue is caused by an integer overflow in the libjasper/jpc/jpc tsfb.c file, which allows remote attackers to cause a denial of service crash via a crafted file. Recommendations For JasPer version...

CVE-2017-5503: Out-of-bounds Write

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...