EulerOS 2.0 SP5 : jasper (EulerOS-SA-2019-2237)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer...

The vulnerability of the function function jas_image_depalettize (libjasper/base/jas_image.c) in the JasPer library allows a attacker to compromise the integrity and confidentiality of data, or cause service interruptions.

The vulnerability of the function function jasimagedepalettize libjasper/base/jasimage.c in the JasPer library is due to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise data integrity and confidentiality, or cause service...

openSUSE Security Update : jasper (openSUSE-2019-2279)

This update for jasper fixes the following issues : Security issues fixed : - CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. - CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. This update was imported from the SUSE:SLE-15:Update update...

openSUSE Security Update : jasper (openSUSE-2019-2282)

This update for jasper fixes the following issues : Security issues fixed : - CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. - CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. This update was imported from the SUSE:SLE-15:Update update...

openSUSE: Security Advisory for jasper (openSUSE-SU-2019:2279-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:2282-1 Security update for jasper

This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. - CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. This update was imported from the SUSE:SLE-15:Update update projec...

OPENSUSE-SU-2019:2279-1 Security update for jasper

This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. - CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. This update was imported from the SUSE:SLE-15:Update update projec...

Security update for jasper (moderate)

openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2019:2282-1 Rating: moderate References: 1117507 1117508 Cross-References: CVE-2018-19540 CVE-2018-19541 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

Security update for jasper (moderate)

openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2019:2279-1 Rating: moderate References: 1117507 1117508 Cross-References: CVE-2018-19540 CVE-2018-19541 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2019:2512-1)

This update for jasper fixes the following issues : Security issues fixed : CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2019:2513-1)

This update for jasper fixes the following issues : Security issues fixed : CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. CVE-2018-19542: Fixed a denial of service in jp2decode bsc1117505...

SUSE-SU-2019:2513-1 Security update for jasper

This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. - CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. - CVE-2018-19542: Fixed a denial of service in jp2decode bsc111750...

SUSE-SU-2019:2512-1 Security update for jasper

This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. - CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507...

NewStart CGSL CORE 5.04 / MAIN 5.04 : jasper Multiple Vulnerabilities (NS-SA-2019-0069)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has jasper packages installed that are affected by multiple vulnerabilities: - The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion...

NewStart CGSL MAIN 4.05 : jasper Multiple Vulnerabilities (NS-SA-2019-0109)

The remote NewStart CGSL host, running version MAIN 4.05, has jasper packages installed that are affected by multiple vulnerabilities: - JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file...

GLSA-201908-03 : JasPer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-03 JasPer: Multiple vulnerabilities Multiple vulnerabilities have been discovered in JasPer. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

JasPer: Multiple vulnerabilities

Background JasPer is a software-based implementation of the codec specified in the JPEG-2000 Part-1 standard. Description Multiple vulnerabilities have been discovered in JasPer. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers fo...

The vulnerability of the JPC_NOMINALGAIN function in the JasPer library allows a hacker to trigger a service failure.

The vulnerability of the JPCNOMINALGAIN function in the JasPer library set is related to errors in processing JPEG-2000 images. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially crafted image...

The vulnerability of the JPEG2000 file conversion tool “jasper” is related to segmentation errors, which allows a malicious actor to cause a service failure.

The vulnerability of the JPEG2000 file conversion tool “jasper” is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...

MGASA-2019-0167 Updated jasper packages fix security vulnerabilities

Updated jasper packages fix security vulnerabilities: The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors CVE-2016-9398. A denial of service in jp2decode CVE-2018-19542. A denial of service...