CVE-2018-19542

תיאור (מקור, אנגלית)

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.

מדדים

EPSS — סבירות ניצול

2% (אחוזון 100) נכון ל-18/10/2026

CWE

CWE-476

מוצרים מושפעים

jasper_project: jasper; canonical: ubuntu linux; suse: linux enterprise desktop; suse: linux enterprise server; debian: debian linux; opensuse: leap

קישורים

• https://github.com/mdadams/jasper/issues/182 ExploitThird Party Advisory
• https://github.com/mdadams/jasper/issues/182 ExploitThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html Mailing ListThird Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.html
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html Mailing ListThird Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.html