CVE-2018-9055
Fixed in a distro release EPSS 2%
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
Products: jasper_project jasper
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | jasper | 2.0.16-1 |
| SUSE Linux Enterprise Desktop 12 SP3 | jasper | 1.900.14-195.8.1 |
| SUSE Linux Enterprise Server 12 SP3 | jasper | 1.900.14-195.8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | jasper | 1.900.14-195.8.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | jasper | 1.900.14-195.8.1 |
| Ubuntu 16.04 LTS | jasper | no fix |
| openSUSE Tumbleweed | jasper | 2.0.33-1.2 |