Skip to content
OpenAdvisories
Unscored DSA-3508-1 3 CVEs

jasper - security update

Published Mar 6, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 jasper 1.900.1-13+deb7u4
Debian · 8 jasper 1.900.1-debian1-2.4+deb8u1

Vulnerabilities 3

  • Unscored —

    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers …

  • Unscored —

    The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (inval…

  • Unscored —

    Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a …