Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-13750

Fixed in a distro release EPSS 4%

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.

Published 2017-08-29 · CVE record · OSV

Products: jasper_project jasper, fedoraproject fedora

Distro releases

ReleasePackageFixed in
openSUSE Tumbleweedjasper2.0.33-1.2