Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-13750 (GCVE-0-2017-13750)
Vulnerability from cvelistv5
Published
2017-08-29 06:00
Modified
2024-08-05 19:05
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T19:05:20.363Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "name": "100514", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/100514" }, { "name": "GLSA-201908-03", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201908-03" }, { "name": "FEDORA-2021-2b151590d9", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2017-08-29T00:00:00", "descriptions": [ { "lang": "en", "value": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-02-03T03:06:09", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "name": "100514", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/100514" }, { "name": "GLSA-201908-03", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201908-03" }, { "name": "FEDORA-2021-2b151590d9", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-13750", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "name": "100514", "refsource": "BID", "url": "http://www.securityfocus.com/bid/100514" }, { "name": "GLSA-201908-03", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201908-03" }, { "name": "FEDORA-2021-2b151590d9", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-13750", "datePublished": "2017-08-29T06:00:00", "dateReserved": "2017-08-29T00:00:00", "dateUpdated": "2024-08-05T19:05:20.363Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2017-13750\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-08-29T06:29:01.033\",\"lastModified\":\"2025-04-20T01:37:25.860\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.\"},{\"lang\":\"es\",\"value\":\"Es posible abortar aserciones alcanzables en la funci\u00f3n jpc_dec_process_siz() en jpc/jpc_dec.c:1296 en JasPer 2.0.12 que provocar\u00eda un ataque de denegaci\u00f3n de servicio remoto.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9F33A75-A103-4BDA-8830-8021A2BFC5B1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/100514\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1485280\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/201908-03\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/100514\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1485280\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201908-03\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
wid-sec-w-2024-0284
Vulnerability from csaf_certbund
Published
2017-08-29 22:00
Modified
2024-02-04 23:00
Summary
JasPer: Mehrere Schwachstelle ermöglicht Denial of Service
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
JasPer ist eine Implementation des JPEG 2000 Part 1 Komprimierungsstandards.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JasPer ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme
- UNIX
- Linux
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "JasPer ist eine Implementation des JPEG 2000 Part 1 Komprimierungsstandards.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JasPer ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- UNIX\n- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0284 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2024-0284.json" }, { "category": "self", "summary": "WID-SEC-2024-0284 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0284" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13745 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13745" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13746 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13746" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13747 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13747" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13748 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13748" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13749 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13749" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13750 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13750" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13751 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13751" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13752 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13752" }, { "category": "external", "summary": "National Vulnerability Database #CVE-2017-13753 vom 2017-08-29", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13753" }, { "category": "external", "summary": "IBM Security Bulletin 7114471 vom 2024-02-02", "url": "https://www.ibm.com/support/pages/node/7114471" } ], "source_lang": "en-US", "title": "JasPer: Mehrere Schwachstelle erm\u00f6glicht Denial of Service", "tracking": { "current_release_date": "2024-02-04T23:00:00.000+00:00", "generator": { "date": "2024-08-15T18:04:49.021+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2024-0284", "initial_release_date": "2017-08-29T22:00:00.000+00:00", "revision_history": [ { "date": "2017-08-29T22:00:00.000+00:00", "number": "1", "summary": "Initial Release" }, { "date": "2017-08-29T22:00:00.000+00:00", "number": "2", "summary": "Version nicht vorhanden" }, { "date": "2019-08-11T22:00:00.000+00:00", "number": "3", "summary": "Referenz(en) aufgenommen: GLSA201908-03" }, { "date": "2024-02-04T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates von IBM aufgenommen" } ], "status": "final", "version": "4" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "IBM App Connect Enterprise", "product": { "name": "IBM App Connect Enterprise", "product_id": "T032495", "product_identification_helper": { "cpe": "cpe:/a:ibm:app_connect_enterprise:-" } } } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "category": "product_name", "name": "Open Source JasPer 2.0.12", "product": { "name": "Open Source JasPer 2.0.12", "product_id": "T010137", "product_identification_helper": { "cpe": "cpe:/a:open_source:jasper:2.0.12" } } } ], "category": "vendor", "name": "Open Source" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-13745", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13745" }, { "cve": "CVE-2017-13746", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13746" }, { "cve": "CVE-2017-13747", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13747" }, { "cve": "CVE-2017-13748", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13748" }, { "cve": "CVE-2017-13749", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13749" }, { "cve": "CVE-2017-13750", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13750" }, { "cve": "CVE-2017-13751", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13751" }, { "cve": "CVE-2017-13752", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13752" }, { "cve": "CVE-2017-13753", "notes": [ { "category": "description", "text": "In JasPer existieren mehrere Schwachstellen. Die Schwachstellen (Assertion) befinden sich in mehreren Funktionen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchf\u00fchren." } ], "product_status": { "known_affected": [ "T010137", "T032495" ] }, "release_date": "2017-08-29T22:00:00.000+00:00", "title": "CVE-2017-13753" } ] }
fkie_cve-2017-13750
Vulnerability from fkie_nvd
Published
2017-08-29 06:29
Modified
2025-04-20 01:37
Severity ?
Summary
There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.
References
▶ | URL | Tags | |
---|---|---|---|
cve@mitre.org | http://www.securityfocus.com/bid/100514 | Third Party Advisory, VDB Entry | |
cve@mitre.org | https://bugzilla.redhat.com/show_bug.cgi?id=1485280 | Exploit, Issue Tracking, Third Party Advisory | |
cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/ | ||
cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ | ||
cve@mitre.org | https://security.gentoo.org/glsa/201908-03 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/100514 | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=1485280 | Exploit, Issue Tracking, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/ | ||
af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ | ||
af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201908-03 | Third Party Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
jasper_project | jasper | 2.0.12 | |
fedoraproject | fedora | 32 | |
fedoraproject | fedora | 33 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "A9F33A75-A103-4BDA-8830-8021A2BFC5B1", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", "matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956", "vulnerable": true }, { "criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack." }, { "lang": "es", "value": "Es posible abortar aserciones alcanzables en la funci\u00f3n jpc_dec_process_siz() en jpc/jpc_dec.c:1296 en JasPer 2.0.12 que provocar\u00eda un ataque de denegaci\u00f3n de servicio remoto." } ], "id": "CVE-2017-13750", "lastModified": "2025-04-20T01:37:25.860", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2017-08-29T06:29:01.033", "references": [ { "source": "cve@mitre.org", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/100514" }, { "source": "cve@mitre.org", "tags": [ "Exploit", "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/201908-03" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/100514" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/201908-03" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-617" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
opensuse-su-2024:10869-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
jasper-2.0.33-1.2 on GA media
Notes
Title of the patch
jasper-2.0.33-1.2 on GA media
Description of the patch
These are all security issues fixed in the jasper-2.0.33-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10869
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "jasper-2.0.33-1.2 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the jasper-2.0.33-1.2 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10869", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10869-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2016-10251 page", "url": "https://www.suse.com/security/cve/CVE-2016-10251/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9262 page", "url": "https://www.suse.com/security/cve/CVE-2016-9262/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9387 page", "url": "https://www.suse.com/security/cve/CVE-2016-9387/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9388 page", "url": "https://www.suse.com/security/cve/CVE-2016-9388/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9389 page", "url": "https://www.suse.com/security/cve/CVE-2016-9389/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9390 page", "url": "https://www.suse.com/security/cve/CVE-2016-9390/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9391 page", "url": "https://www.suse.com/security/cve/CVE-2016-9391/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9392 page", "url": "https://www.suse.com/security/cve/CVE-2016-9392/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9393 page", "url": "https://www.suse.com/security/cve/CVE-2016-9393/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9394 page", "url": "https://www.suse.com/security/cve/CVE-2016-9394/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9396 page", "url": "https://www.suse.com/security/cve/CVE-2016-9396/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9399 page", "url": "https://www.suse.com/security/cve/CVE-2016-9399/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9557 page", "url": "https://www.suse.com/security/cve/CVE-2016-9557/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9583 page", "url": "https://www.suse.com/security/cve/CVE-2016-9583/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9591 page", "url": "https://www.suse.com/security/cve/CVE-2016-9591/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9600 page", "url": "https://www.suse.com/security/cve/CVE-2016-9600/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-1000050 page", "url": "https://www.suse.com/security/cve/CVE-2017-1000050/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-13748 page", "url": "https://www.suse.com/security/cve/CVE-2017-13748/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-13750 page", "url": "https://www.suse.com/security/cve/CVE-2017-13750/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-14132 page", "url": "https://www.suse.com/security/cve/CVE-2017-14132/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5498 page", "url": "https://www.suse.com/security/cve/CVE-2017-5498/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5499 page", "url": "https://www.suse.com/security/cve/CVE-2017-5499/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5503 page", "url": "https://www.suse.com/security/cve/CVE-2017-5503/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-6850 page", "url": "https://www.suse.com/security/cve/CVE-2017-6850/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-18873 page", "url": "https://www.suse.com/security/cve/CVE-2018-18873/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19139 page", "url": "https://www.suse.com/security/cve/CVE-2018-19139/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19539 page", "url": "https://www.suse.com/security/cve/CVE-2018-19539/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19540 page", "url": "https://www.suse.com/security/cve/CVE-2018-19540/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19541 page", "url": "https://www.suse.com/security/cve/CVE-2018-19541/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19542 page", "url": "https://www.suse.com/security/cve/CVE-2018-19542/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19543 page", "url": "https://www.suse.com/security/cve/CVE-2018-19543/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20570 page", "url": "https://www.suse.com/security/cve/CVE-2018-20570/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20622 page", "url": "https://www.suse.com/security/cve/CVE-2018-20622/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9055 page", "url": "https://www.suse.com/security/cve/CVE-2018-9055/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9154 page", "url": "https://www.suse.com/security/cve/CVE-2018-9154/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9252 page", "url": "https://www.suse.com/security/cve/CVE-2018-9252/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-27828 page", "url": "https://www.suse.com/security/cve/CVE-2020-27828/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3272 page", "url": "https://www.suse.com/security/cve/CVE-2021-3272/" } ], "title": "jasper-2.0.33-1.2 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10869-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jasper-2.0.33-1.2.aarch64", "product": { "name": "jasper-2.0.33-1.2.aarch64", "product_id": "jasper-2.0.33-1.2.aarch64" } }, { "category": "product_version", "name": "libjasper-devel-2.0.33-1.2.aarch64", "product": { "name": "libjasper-devel-2.0.33-1.2.aarch64", "product_id": "libjasper-devel-2.0.33-1.2.aarch64" } }, { "category": "product_version", "name": "libjasper4-2.0.33-1.2.aarch64", "product": { "name": "libjasper4-2.0.33-1.2.aarch64", "product_id": "libjasper4-2.0.33-1.2.aarch64" } }, { "category": "product_version", "name": "libjasper4-32bit-2.0.33-1.2.aarch64", "product": { "name": "libjasper4-32bit-2.0.33-1.2.aarch64", "product_id": "libjasper4-32bit-2.0.33-1.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.33-1.2.ppc64le", "product": { "name": "jasper-2.0.33-1.2.ppc64le", "product_id": "jasper-2.0.33-1.2.ppc64le" } }, { "category": "product_version", "name": "libjasper-devel-2.0.33-1.2.ppc64le", "product": { "name": "libjasper-devel-2.0.33-1.2.ppc64le", "product_id": "libjasper-devel-2.0.33-1.2.ppc64le" } }, { "category": "product_version", "name": "libjasper4-2.0.33-1.2.ppc64le", "product": { "name": "libjasper4-2.0.33-1.2.ppc64le", "product_id": "libjasper4-2.0.33-1.2.ppc64le" } }, { "category": "product_version", "name": "libjasper4-32bit-2.0.33-1.2.ppc64le", "product": { "name": "libjasper4-32bit-2.0.33-1.2.ppc64le", "product_id": "libjasper4-32bit-2.0.33-1.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.33-1.2.s390x", "product": { "name": "jasper-2.0.33-1.2.s390x", "product_id": "jasper-2.0.33-1.2.s390x" } }, { "category": "product_version", "name": "libjasper-devel-2.0.33-1.2.s390x", "product": { "name": "libjasper-devel-2.0.33-1.2.s390x", "product_id": "libjasper-devel-2.0.33-1.2.s390x" } }, { "category": "product_version", "name": "libjasper4-2.0.33-1.2.s390x", "product": { "name": "libjasper4-2.0.33-1.2.s390x", "product_id": "libjasper4-2.0.33-1.2.s390x" } }, { "category": "product_version", "name": "libjasper4-32bit-2.0.33-1.2.s390x", "product": { "name": "libjasper4-32bit-2.0.33-1.2.s390x", "product_id": "libjasper4-32bit-2.0.33-1.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.33-1.2.x86_64", "product": { "name": "jasper-2.0.33-1.2.x86_64", "product_id": "jasper-2.0.33-1.2.x86_64" } }, { "category": "product_version", "name": "libjasper-devel-2.0.33-1.2.x86_64", "product": { "name": "libjasper-devel-2.0.33-1.2.x86_64", "product_id": "libjasper-devel-2.0.33-1.2.x86_64" } }, { "category": "product_version", "name": "libjasper4-2.0.33-1.2.x86_64", "product": { "name": "libjasper4-2.0.33-1.2.x86_64", "product_id": "libjasper4-2.0.33-1.2.x86_64" } }, { "category": "product_version", "name": "libjasper4-32bit-2.0.33-1.2.x86_64", "product": { "name": "libjasper4-32bit-2.0.33-1.2.x86_64", "product_id": "libjasper4-32bit-2.0.33-1.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.33-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64" }, "product_reference": "jasper-2.0.33-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.33-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le" }, "product_reference": "jasper-2.0.33-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.33-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x" }, "product_reference": "jasper-2.0.33-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.33-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64" }, "product_reference": "jasper-2.0.33-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.33-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64" }, "product_reference": "libjasper-devel-2.0.33-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.33-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le" }, "product_reference": "libjasper-devel-2.0.33-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.33-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x" }, "product_reference": "libjasper-devel-2.0.33-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.33-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64" }, "product_reference": "libjasper-devel-2.0.33-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.33-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64" }, "product_reference": "libjasper4-2.0.33-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.33-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le" }, "product_reference": "libjasper4-2.0.33-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.33-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x" }, "product_reference": "libjasper4-2.0.33-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.33-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64" }, "product_reference": "libjasper4-2.0.33-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-32bit-2.0.33-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64" }, "product_reference": "libjasper4-32bit-2.0.33-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-32bit-2.0.33-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le" }, "product_reference": "libjasper4-32bit-2.0.33-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-32bit-2.0.33-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x" }, "product_reference": "libjasper4-32bit-2.0.33-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-32bit-2.0.33-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" }, "product_reference": "libjasper4-32bit-2.0.33-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-10251", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-10251" } ], "notes": [ { "category": "general", "text": "Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-10251", "url": "https://www.suse.com/security/cve/CVE-2016-10251" }, { "category": "external", "summary": "SUSE Bug 1029497 for CVE-2016-10251", "url": "https://bugzilla.suse.com/1029497" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-10251", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-10251" }, { "cve": "CVE-2016-9262", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9262" } ], "notes": [ { "category": "general", "text": "Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9262", "url": "https://www.suse.com/security/cve/CVE-2016-9262" }, { "category": "external", "summary": "SUSE Bug 1009994 for CVE-2016-9262", "url": "https://bugzilla.suse.com/1009994" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2016-9262", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9262", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2016-9262" }, { "cve": "CVE-2016-9387", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9387" } ], "notes": [ { "category": "general", "text": "Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9387", "url": "https://www.suse.com/security/cve/CVE-2016-9387" }, { "category": "external", "summary": "SUSE Bug 1010960 for CVE-2016-9387", "url": "https://bugzilla.suse.com/1010960" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2016-9387" }, { "cve": "CVE-2016-9388", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9388" } ], "notes": [ { "category": "general", "text": "The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9388", "url": "https://www.suse.com/security/cve/CVE-2016-9388" }, { "category": "external", "summary": "SUSE Bug 1010975 for CVE-2016-9388", "url": "https://bugzilla.suse.com/1010975" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2016-9388", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9388", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9388" }, { "cve": "CVE-2016-9389", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9389" } ], "notes": [ { "category": "general", "text": "The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9389", "url": "https://www.suse.com/security/cve/CVE-2016-9389" }, { "category": "external", "summary": "SUSE Bug 1010968 for CVE-2016-9389", "url": "https://bugzilla.suse.com/1010968" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2016-9389", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9389", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9389" }, { "cve": "CVE-2016-9390", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9390" } ], "notes": [ { "category": "general", "text": "The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9390", "url": "https://www.suse.com/security/cve/CVE-2016-9390" }, { "category": "external", "summary": "SUSE Bug 1010774 for CVE-2016-9390", "url": "https://bugzilla.suse.com/1010774" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2016-9390", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9390", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9390" }, { "cve": "CVE-2016-9391", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9391" } ], "notes": [ { "category": "general", "text": "The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9391", "url": "https://www.suse.com/security/cve/CVE-2016-9391" }, { "category": "external", "summary": "SUSE Bug 1010782 for CVE-2016-9391", "url": "https://bugzilla.suse.com/1010782" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2016-9391", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9391", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9391" }, { "cve": "CVE-2016-9392", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9392" } ], "notes": [ { "category": "general", "text": "The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9392", "url": "https://www.suse.com/security/cve/CVE-2016-9392" }, { "category": "external", "summary": "SUSE Bug 1010757 for CVE-2016-9392", "url": "https://bugzilla.suse.com/1010757" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9392", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9392" }, { "cve": "CVE-2016-9393", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9393" } ], "notes": [ { "category": "general", "text": "The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9393", "url": "https://www.suse.com/security/cve/CVE-2016-9393" }, { "category": "external", "summary": "SUSE Bug 1010757 for CVE-2016-9393", "url": "https://bugzilla.suse.com/1010757" }, { "category": "external", "summary": "SUSE Bug 1010766 for CVE-2016-9393", "url": "https://bugzilla.suse.com/1010766" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2016-9393", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9393", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9393" }, { "cve": "CVE-2016-9394", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9394" } ], "notes": [ { "category": "general", "text": "The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9394", "url": "https://www.suse.com/security/cve/CVE-2016-9394" }, { "category": "external", "summary": "SUSE Bug 1010756 for CVE-2016-9394", "url": "https://bugzilla.suse.com/1010756" }, { "category": "external", "summary": "SUSE Bug 1010757 for CVE-2016-9394", "url": "https://bugzilla.suse.com/1010757" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2016-9394", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9394", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9394" }, { "cve": "CVE-2016-9396", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9396" } ], "notes": [ { "category": "general", "text": "The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9396", "url": "https://www.suse.com/security/cve/CVE-2016-9396" }, { "category": "external", "summary": "SUSE Bug 1010783 for CVE-2016-9396", "url": "https://bugzilla.suse.com/1010783" }, { "category": "external", "summary": "SUSE Bug 1021871 for CVE-2016-9396", "url": "https://bugzilla.suse.com/1021871" }, { "category": "external", "summary": "SUSE Bug 1082397 for CVE-2016-9396", "url": "https://bugzilla.suse.com/1082397" }, { "category": "external", "summary": "SUSE Bug 1154883 for CVE-2016-9396", "url": "https://bugzilla.suse.com/1154883" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9396", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2016-9396" }, { "cve": "CVE-2016-9399", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9399" } ], "notes": [ { "category": "general", "text": "The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9399", "url": "https://www.suse.com/security/cve/CVE-2016-9399" }, { "category": "external", "summary": "SUSE Bug 1010980 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1010980" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9399" }, { "cve": "CVE-2016-9557", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9557" } ], "notes": [ { "category": "general", "text": "Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9557", "url": "https://www.suse.com/security/cve/CVE-2016-9557" }, { "category": "external", "summary": "SUSE Bug 1010786 for CVE-2016-9557", "url": "https://bugzilla.suse.com/1010786" }, { "category": "external", "summary": "SUSE Bug 1011829 for CVE-2016-9557", "url": "https://bugzilla.suse.com/1011829" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9557", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9557" }, { "cve": "CVE-2016-9583", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9583" } ], "notes": [ { "category": "general", "text": "An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9583", "url": "https://www.suse.com/security/cve/CVE-2016-9583" }, { "category": "external", "summary": "SUSE Bug 1015400 for CVE-2016-9583", "url": "https://bugzilla.suse.com/1015400" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9583", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9583" }, { "cve": "CVE-2016-9591", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9591" } ], "notes": [ { "category": "general", "text": "JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9591", "url": "https://www.suse.com/security/cve/CVE-2016-9591" }, { "category": "external", "summary": "SUSE Bug 1015993 for CVE-2016-9591", "url": "https://bugzilla.suse.com/1015993" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9591", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9591" }, { "cve": "CVE-2016-9600", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9600" } ], "notes": [ { "category": "general", "text": "JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9600", "url": "https://www.suse.com/security/cve/CVE-2016-9600" }, { "category": "external", "summary": "SUSE Bug 1018088 for CVE-2016-9600", "url": "https://bugzilla.suse.com/1018088" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9600", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9600" }, { "cve": "CVE-2017-1000050", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-1000050" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-1000050", "url": "https://www.suse.com/security/cve/CVE-2017-1000050" }, { "category": "external", "summary": "SUSE Bug 1047958 for CVE-2017-1000050", "url": "https://bugzilla.suse.com/1047958" }, { "category": "external", "summary": "SUSE Bug 1078851 for CVE-2017-1000050", "url": "https://bugzilla.suse.com/1078851" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-1000050", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2017-1000050" }, { "cve": "CVE-2017-13748", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-13748" } ], "notes": [ { "category": "general", "text": "There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-13748", "url": "https://www.suse.com/security/cve/CVE-2017-13748" }, { "category": "external", "summary": "SUSE Bug 1053919 for CVE-2017-13748", "url": "https://bugzilla.suse.com/1053919" }, { "category": "external", "summary": "SUSE Bug 1056066 for CVE-2017-13748", "url": "https://bugzilla.suse.com/1056066" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2017-13748" }, { "cve": "CVE-2017-13750", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-13750" } ], "notes": [ { "category": "general", "text": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-13750", "url": "https://www.suse.com/security/cve/CVE-2017-13750" }, { "category": "external", "summary": "SUSE Bug 1053919 for CVE-2017-13750", "url": "https://bugzilla.suse.com/1053919" }, { "category": "external", "summary": "SUSE Bug 1056064 for CVE-2017-13750", "url": "https://bugzilla.suse.com/1056064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2017-13750" }, { "cve": "CVE-2017-14132", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-14132" } ], "notes": [ { "category": "general", "text": "JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-14132", "url": "https://www.suse.com/security/cve/CVE-2017-14132" }, { "category": "external", "summary": "SUSE Bug 1057152 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1057152" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2017-14132" }, { "cve": "CVE-2017-5498", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5498" } ], "notes": [ { "category": "general", "text": "libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5498", "url": "https://www.suse.com/security/cve/CVE-2017-5498" }, { "category": "external", "summary": "SUSE Bug 1020353 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020353" }, { "category": "external", "summary": "SUSE Bug 1020451 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020451" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2017-5498" }, { "cve": "CVE-2017-5499", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5499" } ], "notes": [ { "category": "general", "text": "Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5499", "url": "https://www.suse.com/security/cve/CVE-2017-5499" }, { "category": "external", "summary": "SUSE Bug 1020451 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020451" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2017-5499" }, { "cve": "CVE-2017-5503", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5503" } ], "notes": [ { "category": "general", "text": "The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5503", "url": "https://www.suse.com/security/cve/CVE-2017-5503" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2017-5503" }, { "cve": "CVE-2017-6850", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-6850" } ], "notes": [ { "category": "general", "text": "The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-6850", "url": "https://www.suse.com/security/cve/CVE-2017-6850" }, { "category": "external", "summary": "SUSE Bug 1021868 for CVE-2017-6850", "url": "https://bugzilla.suse.com/1021868" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-6850", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2017-6850" }, { "cve": "CVE-2018-18873", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-18873" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-18873", "url": "https://www.suse.com/security/cve/CVE-2018-18873" }, { "category": "external", "summary": "SUSE Bug 1114495 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114495" }, { "category": "external", "summary": "SUSE Bug 1114498 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114498" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-18873" }, { "cve": "CVE-2018-19139", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19139" } ], "notes": [ { "category": "general", "text": "An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19139", "url": "https://www.suse.com/security/cve/CVE-2018-19139" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-19139" }, { "cve": "CVE-2018-19539", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19539" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19539", "url": "https://www.suse.com/security/cve/CVE-2018-19539" }, { "category": "external", "summary": "SUSE Bug 1117511 for CVE-2018-19539", "url": "https://bugzilla.suse.com/1117511" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19539", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-19539" }, { "cve": "CVE-2018-19540", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19540" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19540", "url": "https://www.suse.com/security/cve/CVE-2018-19540" }, { "category": "external", "summary": "SUSE Bug 1117508 for CVE-2018-19540", "url": "https://bugzilla.suse.com/1117508" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19540", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-19540" }, { "cve": "CVE-2018-19541", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19541" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19541", "url": "https://www.suse.com/security/cve/CVE-2018-19541" }, { "category": "external", "summary": "SUSE Bug 1117507 for CVE-2018-19541", "url": "https://bugzilla.suse.com/1117507" }, { "category": "external", "summary": "SUSE Bug 1119411 for CVE-2018-19541", "url": "https://bugzilla.suse.com/1119411" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19541", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-19541" }, { "cve": "CVE-2018-19542", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19542" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19542", "url": "https://www.suse.com/security/cve/CVE-2018-19542" }, { "category": "external", "summary": "SUSE Bug 1117505 for CVE-2018-19542", "url": "https://bugzilla.suse.com/1117505" }, { "category": "external", "summary": "SUSE Bug 1117507 for CVE-2018-19542", "url": "https://bugzilla.suse.com/1117507" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19542", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-19542" }, { "cve": "CVE-2018-19543", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19543" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19543", "url": "https://www.suse.com/security/cve/CVE-2018-19543" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1117507 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117507" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-19543" }, { "cve": "CVE-2018-20570", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20570" } ], "notes": [ { "category": "general", "text": "jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20570", "url": "https://www.suse.com/security/cve/CVE-2018-20570" }, { "category": "external", "summary": "SUSE Bug 1120807 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1120807" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-20570" }, { "cve": "CVE-2018-20622", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20622" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when \"--output-format jp2\" is used.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20622", "url": "https://www.suse.com/security/cve/CVE-2018-20622" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1120805 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1120805" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-20622" }, { "cve": "CVE-2018-9055", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9055" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9055", "url": "https://www.suse.com/security/cve/CVE-2018-9055" }, { "category": "external", "summary": "SUSE Bug 1087020 for CVE-2018-9055", "url": "https://bugzilla.suse.com/1087020" }, { "category": "external", "summary": "SUSE Bug 1088278 for CVE-2018-9055", "url": "https://bugzilla.suse.com/1088278" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9055", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-9055" }, { "cve": "CVE-2018-9154", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9154" } ], "notes": [ { "category": "general", "text": "There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9154", "url": "https://www.suse.com/security/cve/CVE-2018-9154" }, { "category": "external", "summary": "SUSE Bug 1092115 for CVE-2018-9154", "url": "https://bugzilla.suse.com/1092115" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9154", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-9154" }, { "cve": "CVE-2018-9252", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9252" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9252", "url": "https://www.suse.com/security/cve/CVE-2018-9252" }, { "category": "external", "summary": "SUSE Bug 1088278 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1088278" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-9252" }, { "cve": "CVE-2020-27828", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-27828" } ], "notes": [ { "category": "general", "text": "There\u0027s a flaw in jasper\u0027s jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-27828", "url": "https://www.suse.com/security/cve/CVE-2020-27828" }, { "category": "external", "summary": "SUSE Bug 1179748 for CVE-2020-27828", "url": "https://bugzilla.suse.com/1179748" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-27828" }, { "cve": "CVE-2021-3272", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3272" } ], "notes": [ { "category": "general", "text": "jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3272", "url": "https://www.suse.com/security/cve/CVE-2021-3272" }, { "category": "external", "summary": "SUSE Bug 1181483 for CVE-2021-3272", "url": "https://bugzilla.suse.com/1181483" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:jasper-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:jasper-2.0.33-1.2.s390x", "openSUSE Tumbleweed:jasper-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper-devel-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-2.0.33-1.2.x86_64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.aarch64", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.ppc64le", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.s390x", "openSUSE Tumbleweed:libjasper4-32bit-2.0.33-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2021-3272" } ] }
ghsa-xhvm-w5fj-p25w
Vulnerability from github
Published
2022-05-13 01:11
Modified
2025-04-20 03:44
Severity ?
VLAI Severity ?
Details
There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.
{ "affected": [], "aliases": [ "CVE-2017-13750" ], "database_specific": { "cwe_ids": [ "CWE-617" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-08-29T06:29:00Z", "severity": "HIGH" }, "details": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.", "id": "GHSA-xhvm-w5fj-p25w", "modified": "2025-04-20T03:44:03Z", "published": "2022-05-13T01:11:46Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13750" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201908-03" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/100514" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
gsd-2017-13750
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2017-13750", "description": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.", "id": "GSD-2017-13750", "references": [ "https://www.suse.com/security/cve/CVE-2017-13750.html", "https://advisories.mageia.org/CVE-2017-13750.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2017-13750" ], "details": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.", "id": "GSD-2017-13750", "modified": "2023-12-13T01:21:01.711866Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-13750", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "name": "100514", "refsource": "BID", "url": "http://www.securityfocus.com/bid/100514" }, { "name": "GLSA-201908-03", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201908-03" }, { "name": "FEDORA-2021-2b151590d9", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-13750" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-617" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280", "refsource": "MISC", "tags": [ "Exploit", "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1485280" }, { "name": "100514", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/100514" }, { "name": "GLSA-201908-03", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/201908-03" }, { "name": "FEDORA-2021-2b151590d9", "refsource": "FEDORA", "tags": [ "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "refsource": "FEDORA", "tags": [ "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2021-02-05T14:53Z", "publishedDate": "2017-08-29T06:29Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…