Linux Distros Unpatched Vulnerability : CVE-2018-9154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by...

EUVD-2017-5262

Malware in sbrugna...

EUVD-2018-20753

Malware in sbrugna...

SUSE CVE-2018-9154

There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jasalloc2 return value, a different vulnerability than CVE-2017-13745...

OSV-2020-1252 Heap-buffer-overflow in jpc_dec_process_sot

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13310 Crash type: Heap-buffer-overflow READ 4 Crash state: jpcdecprocesssot jpcdecode jp2decode...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a reachable abort caused by the jpcdecprocesssot function in libjasper/jpc/jpcdec.c. The exploit results in the function returning an unexpected jasalloc2 value, allowing remote attackers to crash the...

opencv/imdecode_fuzzer: Heap-buffer-overflow in jpc_dec_process_sot

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5727882976952320 Project: opencv Fuzzer: aflopencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

CVE-2018-9154

There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jasalloc2 return value, a different vulnerability than CVE-2017-13745...

JasPer Denial of Service Vulnerability (CNVD-2018-09150)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the 'jpcdecprocesssot' function in the libjasper/jpc/jpcdec.c file in JasPer version 2.0.14. A remote attacker could exploit this vulnerability ...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to reachable abort caused by the jpcdecprocesssot function in libjasper/jpc/jpcdec.c...

CVE-2018-9154

There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jasalloc2 return value, a different vulnerability than CVE-2017-13745...

UBUNTU-CVE-2018-9154

There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jasalloc2 return value, a different vulnerability than CVE-2017-13745...

CVE-2018-9154

JasPer 2.0.14 contains a reachable abort in jpc_dec_process_sot() in libjasper/jpc/jpc_dec.c, which can be triggered by a crafted input to cause remote denial of service. This is described as a different vulnerability from CVE-2017-13745; the connected documents do not provide further exploit det...

CVE-2018-9154: Improper Input Validation

There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jasalloc2 return value, a different vulnerability than CVE-2017-13745...

CVE-2017-13745

There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...

JasPer Denial of Service Vulnerability (CNVD-2017-25693)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdecprocesssot function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...

UBUNTU-CVE-2017-13745

There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...

CVE-2017-13745

There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...

CVE-2017-13745: Reachable Assertion

There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...

CVE-2014-8157

Off-by-one error in the jpcdecprocesssot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow...