Skip to content
OpenAdvisories
Unscored DSA-3138-1 2 CVEs

jasper - security update

Published Jan 25, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 jasper 1.900.1-13+deb7u3

Vulnerabilities 2

  • Unscored —
    CVE-2014-8157 EPSS 17%

    Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a d…

  • Unscored —
    CVE-2014-8158 EPSS 14%

    Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a den…