CVE-2018-19542
Fixed in a distro release EPSS 2%
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.
Products: jasper_project jasper, canonical ubuntu_linux, suse linux_enterprise_desktop, suse linux_enterprise_server, debian_linux, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | jasper | 1.900.1-debian1-2.4+deb8u5 |
| SUSE Linux Enterprise Desktop 12 SP4 | jasper | 1.900.14-195.15.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | jasper | 2.0.14-3.3.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | jasper | 2.0.14-3.3.2 |
| SUSE Linux Enterprise Server 12 SP4 | jasper | 1.900.14-195.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | jasper | 1.900.14-195.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | jasper | 1.900.14-195.15.1 |
| Ubuntu 16.04 LTS | jasper | 1.900.1-debian1-2.4ubuntu1.3 |
| openSUSE Leap 15.0 | jasper | 2.0.14-lp150.2.3.1 |
| openSUSE Tumbleweed | jasper | 2.0.33-1.2 |