Fedora: Security Advisory for jasper (FEDORA-2021-0c18ee6369)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : jasper (2021-0c18ee6369)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-0c18ee6369 advisory. - A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2decode function whic may lead to disclosure of information o...

CVE-2021-26926

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2decode function whic may lead to disclosure of information or program crash...

CVE-2021-26927

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2decode in jp2dec.c may lead to program crash and denial of service...

PT-2021-17181

Name of the Vulnerable Software and Affected Versions: jasper versions prior to 2.0.25 Description: A flaw was found in the jp2 decode function, which may lead to disclosure of information or program crash due to an out of bounds read issue. Recommendations: For versions prior to 2.0.25, update t...

PT-2021-17182

Name of the Vulnerable Software and Affected Versions: jasper versions prior to 2.0.25 Description: A flaw was found in the jasper software, where a null pointer dereference in jp2 decode in jp2 dec.c may lead to a program crash and denial of service. Recommendations: For versions prior to 2.0.25...

Fedora: Security Advisory for mingw-jasper (FEDORA-2021-b1b17185fc)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : mingw-jasper (2021-8ecb3686ca)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-8ecb3686ca advisory. - jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of...

Fedora 32 : mingw-jasper (2021-b1b17185fc)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-b1b17185fc advisory. - jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of...

[SECURITY] Fedora 32 Update: mingw-jasper-2.0.24-2.fc32

MinGW Windows Jasper library...

[SECURITY] Fedora 33 Update: mingw-jasper-2.0.24-2.fc33

MinGW Windows Jasper library...

jasper -- multiple vulnerabilities

JasPer Releases: - Fix memory-related bugs in the JPEG-2000 codec resulting from attempting to decode invalid code streams. 264, 265 This fix is associated with CVE-2021-26926 and CVE-2021-26927. - Fix wrong return value under some compilers 260 - Fix CVE-2021-3272 heap buffer overflow in jp2deco...

Fedora: Security Advisory for jasper (FEDORA-2021-0a6290f865)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 32 : jasper (2021-0a6290f865)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-0a6290f865 advisory. - The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion...

[SECURITY] Fedora 32 Update: jasper-2.0.24-1.fc32

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

Fedora: Security Advisory for jasper (FEDORA-2021-2b151590d9)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : jasper (2021-2b151590d9)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2b151590d9 advisory. - The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion...

[SECURITY] Fedora 33 Update: jasper-2.0.24-1.fc33

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

JasPer heap buffer overflow vulnerability (CNVD-2021-08886)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A heap buffer overflow vulnerability exists in jp2decode in jp2/jp2dec.c in JasPer 2.0.24. The vulnerability stems from an invalid...

The vulnerability of the jp2_decode function (libjasper/jp2/jp2_dec.c) in the JasPer library allows a hacker to induce a service failure.

The vulnerability of the jp2decode function libjasper/jp2/jp2dec.c in the JasPer library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...