MiracleLinux 7 : jasper-1.900.1-33.0.1.el7.AXS7 (AXSA:2024-8730:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8730:01 advisory. CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing code CVEs: CVE-2023-51257 An invalid memory write issue in Jasper-Software Jasper...

EUVD-2018-13137

Malware in sbrugna...

EUVD-2016-2672

Malware in sbrugna...

EUVD-2023-55979

Malicious code in bioql PyPI...

RHSA-2015:0074 Red Hat Security Advisory: jasper security update

Bulletin has no description...

RHSA-2011:1807 Red Hat Security Advisory: jasper security update

Bulletin has no description...

Low: jasper

Issue Overview: An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. CVE-2023-51257 Affected Packages: jasper Issue Correction: Run dnf update jasper --releasever 2023.3.20240205 to update your system. New Packages: aarch64:...

Amazon Linux 2023 : jasper, jasper-devel, jasper-libs (ALAS2023-2024-511)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-511 advisory. An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. CVE-2023-51257 Tenable has extracted the preceding description block directl...

SUSE SLES12 Security Update : jasper (SUSE-SU-2024:0240-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0240-1 advisory. - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802. Tenable has extracted the preceding description block directly...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jasper (SUSE-SU-2024:0241-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0241-1 advisory. - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802. Tenable has extracted the...

Arbitrary Code Execution

Jasper-Software is vulnerable to Arbitrary Code Execution. The vulnerability is caused due to a missing range check in the JPC. This allows a local attacker to execute arbitrary code...

SUSE CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

UBUNTU-CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

Input validation

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

CVE-2023-51257

CVE-2023-51257 affects Jasper-Software Jasper up to v4.1.1 (and related Jasper packages). The root cause is an invalid memory write in jas_icc.c:1333:23, enabling a local attacker to execute arbitrary code. Connected advisories show multiple vendors packaging patched Jasper releases and recommend...

CVE-2023-51257: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...