CVE-2017-13750
Fixed in a distro release EPSS 4%
There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.
Products: jasper_project jasper, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Tumbleweed | jasper | 2.0.33-1.2 |