CVE-2018-20584
Fixed in a distro release EPSS 3%
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.
Products: jasper_project jasper, debian_linux, oracle outside_in_technology
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | jasper | 1.900.1-debian1-2.4+deb8u5 |
| Ubuntu 16.04 LTS | jasper | no fix |