CVE-2017-13748
Fixed in a distro release EPSS 5%
There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.
Products: jasper_project jasper, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | jasper | 1.900.1-debian1-2.4+deb8u4 |
| Ubuntu 16.04 LTS | jasper | no fix |
| openSUSE Tumbleweed | jasper | 2.0.33-1.2 |