Unscored DSA-3106-1 2 CVEs

jasper - security update

Published Dec 20, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	jasper	1.900.1-13+deb7u2

Vulnerabilities 2

Unscored —

CVE-2014-8137 EPSS 15%

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers …

jasper Ubuntu

Dec 24, 2014
Unscored —

CVE-2014-8138 EPSS 19%

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a …

jasper Ubuntu

Dec 24, 2014