JasPer: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• High 7.5
  CVE-2024-31744

  In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulner…

  jasper jasper Ubuntu Azure Linux
  Apr 19, 2024

Revision history

1. 2024-09-30 #5

   Neue Updates von Dell aufgenommen

2. 2024-08-19 #4

   Neue Updates von SUSE aufgenommen

3. 2024-08-05 #3

   Neue Updates von Dell aufgenommen

4. 2024-04-23 #2

   Neue Updates von SUSE aufgenommen

5. 2024-04-21 #1

   Initiale Fassung

References

• Jasper GitHub vom 2024-04-21
  https://github.com/jasper-software/jasper/issues/381
• NIST Vulnerability Database vom 2024-04-21
  https://nvd.nist.gov/vuln/detail/CVE-2024-31744
• SUSE Security Update SUSE-SU-2024:1396-1 vom 2024-04-23
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018403.html
• Dell Security Advisory DSA-2024-348 vom 2024-08-06
  https://www.dell.com/support/kbdoc/de-de/000227573/dsa-2024-348-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities
• SUSE Security Update SUSE-SU-2024:1464-1 vom 2024-08-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6P4UG4H5NVS7HCSSSBJTNPEBHMITTTOO/
• Dell Security Advisory DSA-2024-412 vom 2024-09-30
  https://www.dell.com/support/kbdoc/de-de/000230678/dsa-2024-412-security-update-for-dell-ecs-3-8-1-2-multiple-third-party-component-vulnerabilities