PT-2017-10760

CVE-2017-1000050

·

Published

2017-07-13

·

Updated

2024-06-15

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12
Description The issue is related to a NULL pointer exception in the jp2 encode function, which fails to check if the image contains at least one component, resulting in a denial-of-service.
Recommendations For JasPer version 2.0.12, consider disabling the jp2 encode function until a patch is available to prevent potential denial-of-service attacks.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
CESA-2018_3253
MGASA-2017-0474
OPENSUSE-SU-2024:10869-1
RHSA-2018:3253
RHSA-2018_3253
SUSE-SU-2017:1901-1
SUSE-SU-2017:1916-1
SUSE-SU-2018:0339-1
USN-3693-1
Found an issue in the description? Have something to add? Feel free to write us 👾