SUSE: Security Advisory (SUSE-SU-2026:20200-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 8 : jasper-2.0.14-5.el8 (AXSA:2021-2685:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2685:01 advisory. jasper: Heap-based buffer overflow in cpcreate in jpcenc.c CVE-2020-27828 jasper: Heap-based buffer over-read in jp2decode in jp2dec.c CVE-2021-3272...

MiracleLinux 7 : jasper-1.900.1-33.el7 (AXSA:2019-3676:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3676:01 advisory. jasper: reachable assertion in JPCNOMINALGAIN CVE-2016-9396 jasper: NULL pointer exception in jp2encode CVE-2017-1000050 Tenable has extracted the...

MiracleLinux 7 : jasper-1.900.1-33.0.4.el7.AXS7 (AXSA:2025-11014:03)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-11014:03 advisory. CVE-2025-8836: fix manipulation in function jpcfloorlog2 to prevent reachable assertion CVEs: CVE-2025-8836 A vulnerability was determined in JasPe...

CVE-2025-8837 affecting package jasper for versions less than 2.0.32-5

CVE-2025-8837 affecting package jasper for versions less than 2.0.32-5. A patched version of the package is available...

CVE-2025-8836 affecting package jasper for versions less than 2.0.32-5

CVE-2025-8836 affecting package jasper for versions less than 2.0.32-5. A patched version of the package is available...

CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

CVE-2025-8836 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8836 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

SUSE: Security Advisory (SUSE-SU-2025:03219-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15447-1 jasper-4.2.8-2.1 on GA media

These are all security issues fixed in the jasper-4.2.8-2.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in jasper-95fp6-txeo1-xenith-project (npm)

The package jasper-95fp6-txeo1-xenith-project was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-2963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdoptsparse that can cause a crash or segmentatio...

Linux Distros Unpatched Vulnerability : CVE-2016-9600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file...

Linux Distros Unpatched Vulnerability : CVE-2017-14132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22,...

Linux Distros Unpatched Vulnerability : CVE-2017-13749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a reachable assertion abort in the function jpcpinextrpcl in jpc/jpct2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

Linux Distros Unpatched Vulnerability : CVE-2017-13747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a reachable assertion abort in the function jpcfloorlog2 in jpc/jpcmath.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

Linux Distros Unpatched Vulnerability : CVE-2018-20570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read. CVE-2018-20570 Note that Nessus relies on the presence of the package as reported ...

Linux Distros Unpatched Vulnerability : CVE-2017-13745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by...

Linux Distros Unpatched Vulnerability : CVE-2014-8138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execut...