CVE-2017-5498
Fixed in a distro release EPSS 1%
libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.
Products: jasper_project jasper
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 12 SP1 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Server 11 SP4 | jasper | 1.900.14-134.32.1 |
| SUSE Linux Enterprise Server 12 SP1 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Server 12 SP2 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | jasper | 1.900.14-134.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | jasper | 1.900.14-134.32.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | jasper | 1.900.14-194.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | jasper | 1.900.14-194.1 |
| Ubuntu 16.04 LTS | jasper | no fix |
| openSUSE Tumbleweed | jasper | 2.0.33-1.2 |