Yüksek CVSS 7.8 PoC var
CVE-2018-19543: Jasper: sınır dışı okuma
Açıklama (NVD)
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
Özet bilgiler
- Ürün
- Jasper Project Jasper
- CVSS v3.1
- 7.8
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %1,55 (yüzdelik 75)
- CWE
- CWE-125
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| jasper-project-jasper | 2.0.14 | 2.0.14 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| suse-linux-enterprise-desktop | 12 | 12 | — |
| suse-linux-enterprise-desktop | 12 | 12 | — |
| suse-linux-enterprise-server | 11 | 11 | — |
| suse-linux-enterprise-server | 11 | 11 | — |
| suse-linux-enterprise-server | 12 | 12 | — |
| suse-linux-enterprise-server | 12 | 12 | — |