5 matches found
SUSE CVE-2017-13745
There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...
PT-2020-21791
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the jpc dec process sot function, which is called by jpc decode and jp2 decode...
PT-2018-18891
Name of the Vulnerable Software and Affected Versions JasPer version 2.0.14 Description The issue is related to a reachable abort in the jpc dec process sot function, located in libjasper/jpc/jpc dec.c, which can lead to a remote denial of service attack. This occurs when an unexpected jas alloc2...
PT-2017-13066
Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dec process sot in jpc/jpc dec.c. This can lead to a remote denial of service attack by triggering an unexpected return value from jpc...
PT-2015-4019
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is caused by an off-by-one error in the jpc dec process sot function, which can be triggered by a crafted JPEG 2000 image. This can lead to a denial of service crash or possibly allow...