CVE-2018-19543
טרם דורגה
תיאור (מקור, אנגלית)
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
מדדים
- EPSS — סבירות ניצול
- 2% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-125
מוצרים מושפעים
jasper_project: jasper; canonical: ubuntu linux; debian: debian linux; suse: linux enterprise desktop; suse: linux enterprise server
קישורים
- https://github.com/mdadams/jasper/issues/182 ExploitThird Party Advisory
- https://github.com/mdadams/jasper/issues/182 ExploitThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
- https://www.oracle.com/security-alerts/cpuapr2020.html