Veracode Vulnerability DatabaseVERACODE:18009Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
JasPer is vulnerable to denial of service attacks. A remote attacker could cause denial of service through assertion failure via a crafted image file. Affected by this issue is the function jpc_pi_nextrpcl in jpc_t2cod.c.
References
www.openwall.com/lists/oss-security/2016/11/17/1
www.securityfocus.com/bid/94377
access.redhat.com/errata/RHSA-2017:1208
access.redhat.com/security/updates/classification/#important
blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure
bugzilla.redhat.com/show_bug.cgi?id=1396972
github.com/mdadams/jasper/commit/f7038068550fba0e41e1d0c355787f1dcd5bf330
usn.ubuntu.com/3693-1/
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P