Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-13748

Fixed in a distro release EPSS 5%

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.

Published 2017-08-29 · CVE record · OSV

Products: jasper_project jasper, fedoraproject fedora, debian_linux

Distro releases

ReleasePackageFixed in
Debian 8jasper1.900.1-debian1-2.4+deb8u4
Ubuntu 16.04 LTSjasperno fix
openSUSE Tumbleweedjasper2.0.33-1.2