Lucene search
Ubuntu.comUB:CVE-2017-13746HistoryAug 29, 2017 - 12:00 a.m.
CVE-2017-13746
2017-08-2900:00:00
ubuntu.com
ubuntu.com
8
0.005 Low
EPSS
Percentile
75.5%
There is a reachable assertion abort in the function jpc_dec_process_siz()
in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of
service attack.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=1485286>
- <https://github.com/mdadams/jasper/issues/165>
Notes
| Author | Note |
|---|---|
| mdeslaur | introduced in 2.0.12 by https://github.com/mdadams/jasper/commit/a712a2041085e7cd5f2b153e1532ac2a2954ffaa |
Related
cvelist
cvelist
CVE-2017-13746
2017-08-29 06:00:00
redhatcve
redhatcve
CVE-2017-13746
2017-09-06 14:20:20
osv
osv
CVE-2017-13746
2017-08-29 06:29:00
prion
prion
Authentication flaw
2017-08-29 06:29:00
cve
cve
CVE-2017-13746
2017-08-29 06:29:00
fedora
fedora
[SECURITY] Fedora 32 Update: jasper-2.0.24-1.fc32
2021-02-03 01:18:35
[SECURITY] Fedora 33 Update: jasper-2.0.24-1.fc33
2021-01-31 01:28:41
openvas
openvas
Fedora: Security Advisory for jasper (FEDORA-2021-2b151590d9)
2021-02-01 00:00:00
Fedora: Security Advisory for jasper (FEDORA-2021-0a6290f865)
2021-02-04 00:00:00
Mageia: Security Advisory (MGASA-2020-0337)
2022-01-28 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2020-08-18 23:43:16
nessus
nessus
Fedora 33 : jasper (2021-2b151590d9)
2021-02-01 00:00:00
Fedora 32 : jasper (2021-0a6290f865)
2021-02-04 00:00:00
GLSA-201908-03 : JasPer: Multiple vulnerabilities
2019-08-12 00:00:00
gentoo
gentoo
JasPer: Multiple vulnerabilities
2019-08-09 00:00:00