CVE-2017-1000050
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-07-17
- Last modified
- 2024-08-05
- Weaknesses
- CWE-476
Affected products
- Ubuntu Linux (Canonical)
- Fedora (Fedoraproject)
- Jasper (Jasper Project)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Workstation (Redhat)
References
- http://www.openwall.com/lists/oss-security/2017/03/06/1
- http://www.securityfocus.com/bid/96595
- https://access.redhat.com/errata/RHSA-2018:3253
- https://access.redhat.com/errata/RHSA-2018:3505
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJ…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LH…
- https://security.gentoo.org/glsa/201908-03
- https://usn.ubuntu.com/3693-1/
