Skip to content
OpenAdvisories
Unscored DLA-1583-1 5 CVEs

jasper - security update

Published Nov 20, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 jasper 1.900.1-debian1-2.4+deb8u4

Vulnerabilities 5

  • Unscored —
    CVE-2015-5203

    Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a …

    jasper Ubuntu
  • Unscored —
    CVE-2015-5221

    Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 librar…

    jasper Ubuntu
  • Unscored —
    CVE-2016-8690

    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial …

    jasper Ubuntu
  • Unscored —
    CVE-2017-13748

    There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will…

    jasper Ubuntu
  • Unscored —
    CVE-2017-14132

    JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.90…

    jasper Ubuntu