SUSE SLES12 Security Update : jasper (SUSE-SU-2024:1396-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1396-1 advisory. - CVE-2024-31744: Fixed denial of service through assertion failure in jpcstreamlistremove bsc1223155. Tenable has extracted the preceding...

CVE-2024-31744

In Jasper 4.2.2, the jpcstreamlistremove function in src/libjasper/jpc/jpcdec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a denial of service attack through a specific image file...

CVE-2024-31744

A vulnerability exists in Jasper 4.2.2 within the jpc_streamlist_remove function located in src/libjasper/jpc/jpc_dec.c:2407. This assertion failure allows an attacker to trigger a denial of service (DoS) attack by providing a specifically crafted image file. The vulnerability impacts various dis...