Lucene search
K

30 matches found

OSV
OSV
added 2022/02/24 7:37 a.m.8 views

OPENSUSE-SU-2022:0562-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2021-27845: Fixed divide-by-zery issue in cpcreate bsc1188437...

5.5CVSS6AI score0.0063EPSS
Exploits1References3
OSV
OSV
added 2019/05/02 2:26 p.m.5 views

OPENSUSE-SU-2019:1315-1 Security update for jasper

This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19542: Fixed a denial of service in jp2decode bsc1117505. - CVE-2018-19539: Fixed a denial of service in jasimagereadcmpt bsc1117511. - CVE-2016-9396: Fixed a denial of service in jpccoxgetcompparms bsc1010783...

7.5CVSS6.9AI score0.05686EPSS
Exploits2References7
OSV
OSV
added 2017/09/09 8:29 a.m.25 views

CVE-2017-14229

There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...

7.5CVSS6.7AI score
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/05/09 5:13 p.m.8 views

jasper: heap-based buffer overflow in QMFB code in JPC codec

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.6AI score0.01905EPSS
Exploits1References4
OSV
OSV
added 2017/02/09 12:0 a.m.35 views

DSA-3785-1 jasper - security update

Bulletin has no description...

7.8CVSS6.8AI score0.03419EPSS
Exploits5
OSV
OSV
added 2016/12/10 12:0 a.m.30 views

DLA-739-1 jasper - security update

Bulletin has no description...

7.8CVSS6.8AI score0.03419EPSS
Exploits6
CNVD
CNVD
added 2016/10/24 12:0 a.m.4 views

JasPer null pointer back-reference vulnerability (CNVD-2016-10308)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A null pointer back-reference vulnerability exists in the JasPer function jpcpidestroy, which can be exploited by an attacker to crash an application and deny service to legitimat...

5.5CVSS6.9AI score0.0156EPSS
Exploits0References1
OSV
OSV
added 2011/12/15 3:57 a.m.5 views

CVE-2011-4517

The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service heap memory corruption, via a crafte...

7.5AI score
Exploits0References24
NVD
NVD
added 2008/10/02 6:18 p.m.23 views

CVE-2008-3522

Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mifhdrput function and use of vsprintf...

10CVSS6.4AI score0.04509EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2008/10/02 12:0 a.m.2 views

PT-2008-4912 · Jasper +1 · Jasper +1

Name of the Vulnerable Software and Affected Versions: JasPer version 1.900.1 Description: A race condition exists in the jas stream tmpfile function, allowing local users to cause a denial of service by creating a specific temporary file, which causes the program to exit. Recommendations: For...

10CVSS6.7AI score0.18501EPSS
Exploits8References67
Rows per page
Query Builder