High WID-SEC-2024-0284 9 CVEs

JasPer: Mehrere Schwachstelle ermöglicht Denial of Service

Published Aug 29, 2017 · Updated Feb 4, 2024 · Revision 4 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JasPer ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

JasPer ist eine Implementation des JPEG 2000 Part 1 Komprimierungsstandards.

Vulnerabilities 9

Unscored —

CVE-2017-13745

There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will …

jasper Ubuntu

Aug 29, 2017
Unscored —

CVE-2017-13746

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that …

Aug 29, 2017
Unscored —

CVE-2017-13747

There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead …

Aug 29, 2017
Unscored —

CVE-2017-13748

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will…

jasper Ubuntu

Aug 29, 2017
Unscored —

CVE-2017-13749

There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will le…

Aug 29, 2017
Unscored —

CVE-2017-13750

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that …

Aug 29, 2017
Unscored —

CVE-2017-13751

There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead t…

Aug 29, 2017
Unscored —

CVE-2017-13752

There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead …

Aug 29, 2017
Unscored —

CVE-2017-13753 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9396. Reason: This candidate is a duplicate of CVE-2016-9396. No…

Aug 29, 2017

Revision history

2024-02-04 #4
Neue Updates von IBM aufgenommen
2019-08-11 #3
Referenz(en) aufgenommen: GLSA201908-03
2017-08-29 #1
Initial Release
2017-08-29 #2
Version nicht vorhanden

References

National Vulnerability Database #CVE-2017-13745 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13745
National Vulnerability Database #CVE-2017-13746 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13746
National Vulnerability Database #CVE-2017-13747 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13747
National Vulnerability Database #CVE-2017-13748 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13748
National Vulnerability Database #CVE-2017-13749 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13749
National Vulnerability Database #CVE-2017-13750 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13750
National Vulnerability Database #CVE-2017-13751 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13751
National Vulnerability Database #CVE-2017-13752 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13752
National Vulnerability Database #CVE-2017-13753 vom 2017-08-29
https://nvd.nist.gov/vuln/detail/CVE-2017-13753
IBM Security Bulletin 7114471 vom 2024-02-02
https://www.ibm.com/support/pages/node/7114471