EUVD-2021-13708

Malware in sbrugna...

EUVD-2018-11232

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-3272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels a...

NULL Pointer Dereference

libjasper.so is vulnerable to NULL Pointer Dereference. The vulnerability is due to jp2decode function in jp2dec.c as there is no validation for the index obtained through the chantocmptlut array before it is used to access and set component types. An attacker can exploit this via specially craft...

SUSE CVE-2018-19543

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2decode in libjasper/jp2/jp2dec.c...

SUSE CVE-2021-26926

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2decode function whic may lead to disclosure of information or program crash...

SUSE CVE-2021-26927

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2decode in jp2dec.c may lead to program crash and denial of service...

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.

...

jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.

...

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

...

jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2decode in jp2dec.c may lead to program crash and denial of service...

SUSE SLES11 Security Update : jasper (SUSE-SU-2021:14627-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14627-1 advisory. - There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary...

CVE-2021-26927

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2decode in jp2dec.c may lead to program crash and denial of service...

UBUNTU-CVE-2021-26927

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2decode in jp2dec.c may lead to program crash and denial of service...

AZL-6491 CVE-2021-26926 affecting package jasper for versions less than 2.0.32-2

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2decode function whic may lead to disclosure of information or program crash...

UBUNTU-CVE-2021-26926

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2decode function whic may lead to disclosure of information or program crash...

CVE-2021-26926

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2decode function whic may lead to disclosure of information or program crash...

jasper -- multiple vulnerabilities

JasPer Releases: - Fix memory-related bugs in the JPEG-2000 codec resulting from attempting to decode invalid code streams. 264, 265 This fix is associated with CVE-2021-26926 and CVE-2021-26927. - Fix wrong return value under some compilers 260 - Fix CVE-2021-3272 heap buffer overflow in jp2deco...

Heap overflow

jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components...

CVE-2021-3272

CVE-2021-3272 affects the Jasper JPEG-2000 library. The issue is in jp2_decode() of libjasper (JasPer 2.0.24) where a heap-based buffer over-read can occur when there is an invalid relationship between the number of channels and the number of image components. This can lead to information disclos...