Orta CVSS 6.5 PoC var
CVE-2018-19542: Jasper: NULL işaretçi başvurusu
Açıklama (NVD)
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.
Özet bilgiler
- Ürün
- Jasper Project Jasper
- CVSS v3.1
- 6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %1,96 (yüzdelik 80)
- CWE
- CWE-476
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| jasper-project-jasper | 2.0.14 | 2.0.14 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| suse-linux-enterprise-desktop | 12 | 12 | — |
| suse-linux-enterprise-desktop | 12 | 12 | — |
| suse-linux-enterprise-server | 11 | 11 | — |
| suse-linux-enterprise-server | 11 | 11 | — |
| suse-linux-enterprise-server | 12 | 12 | — |
| suse-linux-enterprise-server | 12 | 12 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| opensuse-leap | 15.0 | 15.0 | — |