2041 matches found
The vulnerability of the jas_image_decode() function in the JPC library, which allows an attacker to execute arbitrary code.
The vulnerability of the jasimagedecode function in the JPC library for the JasPer set is related to the issue where the operation exits the buffer boundaries during the processing of ICC profiles. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
SUSE: Security Advisory (SUSE-SU-2024:0240-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : jasper (SUSE-SU-2024:0240-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0240-1 advisory. - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802. Tenable has extracted the preceding description block directly...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jasper (SUSE-SU-2024:0241-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0241-1 advisory. - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802. Tenable has extracted the...
SUSE-SU-2024:0241-1 Security update for jasper
This update for jasper fixes the following issues: - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802...
SUSE-SU-2024:0240-1 Security update for jasper
This update for jasper fixes the following issues: - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802...
[SECURITY] Fedora 38 Update: mingw-jasper-3.0.6-5.fc38
MinGW Windows Jasper library...
[SECURITY] Fedora 39 Update: mingw-jasper-3.0.6-5.fc39
MinGW Windows Jasper library...
Fedora: Security Advisory for mingw-jasper (FEDORA-2024-b5b85798cd)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-f53b383648)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 39 : mingw-jasper (2024-f53b383648)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f53b383648 advisory. Backport fix for CVE-2023-51257. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 38 : mingw-jasper (2024-b5b85798cd)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b5b85798cd advisory. Backport fix for CVE-2023-51257. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Arbitrary Code Execution
Jasper-Software is vulnerable to Arbitrary Code Execution. The vulnerability is caused due to a missing range check in the JPC. This allows a local attacker to execute arbitrary code...
SUSE CVE-2023-51257
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...
CVE-2023-51257
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...
AZL-33325 CVE-2023-51257 affecting package jasper for versions less than 2.0.32-4
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...
CVE-2023-51257
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...
AZL-34807 CVE-2023-51257 affecting package jasper for versions less than 4.2.1-1
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...