CVE-2022-40755

The CVE-2022-40755 entry concerns JasPer 3.0.6. The vulnerability is a denial-of-service caused by a reachable assertion in the function inttobits within libjasper/base/jas_image.c. Documents consistently identify the affected component as JasPer (libjasper) and point to this specific assertion-t...

CVE-2022-40755

JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jasimage.c...

CVE-2022-40755

JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jasimage.c...

JasPer 安全漏洞

JasPer is a C-based tool for image processing from the individual developer Michael Adams. The software supports the JPEG-2000 format as defined in ISO/IEC 15444-1 and is primarily used for image encoding and processing. A security vulnerability exists in JasPer version 3.0.6, which originates fr...

CVE-2022-40755: Reachable Assertion

JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jasimage.c...

PT-2022-25515

Name of the Vulnerable Software and Affected Versions JasPer version 3.0.6 Description The issue allows for denial of service via a reachable assertion in the function inttobits in libjasper/base/jas image.c. Recommendations For JasPer version 3.0.6, at the moment, there is no information about a...

Fedora: Security Advisory for mingw-jasper (FEDORA-2022-b38fbc239b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: mingw-jasper-3.0.6-2.fc37

MinGW Windows Jasper library...

Ubuntu: Security Advisory (USN-2434-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-2963

A vulnerability found in jasper. A memory leak bug occurs in the cmdoptsparse function, possibly causing a crash or segmentation fault...

CVE-2022-30929

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

CVE-2022-30929

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

CVE-2022-30929

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

Design/Logic Flaw

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

CVE-2022-30929

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

CVE-2022-30929

CVE-2022-30929 affects Mini-Tmall v1.0 and is described as vulnerable to insecure permissions via the Tomcat Jasper embedding component (tomcat-embed-jasper). Several connected sources reiterate an insecure privilege/permission issue, including Red Hat and CNNVD entries, which label it as an inse...

CVE-2022-30929: Incorrect Permission Assignment for Critical Resource

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

Mini-Tmall 安全漏洞

Mini-Tmall is a Spring Boot-based mini-Tmall mall , fast deployment run , suitable for use as a Bijou template . A security vulnerability exists in Mini-Tmall v1.0. An attacker exploits the vulnerability to perform an insecure privilege attack via tomcat-embed-jasper...

PT-2022-20389

Name of the Vulnerable Software and Affected Versions Mini-Tmall version 1.0 Description The issue is related to Insecure Permissions via tomcat-embed-jasper. Recommendations For Mini-Tmall version 1.0, consider restricting access to the tomcat-embed-jasper component until a patch is available. A...