Red Hat Security AdvisoryRHSA-2018:3253
jasper security update
Released 2018-10-30 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) jasper-1.900.1-33.el7, jasper-libs-1.900.1-33.el7
- Red Hat Enterprise Linux Client Optional (v. 7) jasper-1.900.1-33.el7, jasper-devel-1.900.1-33.el7, jasper-utils-1.900.1-33.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) jasper-1.900.1-33.el7, jasper-libs-1.900.1-33.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) jasper-1.900.1-33.el7, jasper-devel-1.900.1-33.el7, jasper-utils-1.900.1-33.el7
- Red Hat Enterprise Linux Server (v. 7) jasper-1.900.1-33.el7, jasper-libs-1.900.1-33.el7, jasper-libs-1.900.1-33.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) jasper-1.900.1-33.el7, jasper-devel-1.900.1-33.el7, jasper-devel-1.900.1-33.el7.ppc +1
- Red Hat Enterprise Linux Workstation (v. 7) jasper-1.900.1-33.el7, jasper-libs-1.900.1-33.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) jasper-1.900.1-33.el7, jasper-devel-1.900.1-33.el7, jasper-utils-1.900.1-33.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) jasper-1.900.1-33.el7, jasper-libs-1.900.1-33.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) jasper-1.900.1-33.el7, jasper-devel-1.900.1-33.el7, jasper-utils-1.900.1-33.el7
Fixes 2 records
Priority MEDIUM 42
The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05757 · Published 2017-03-23 · Partial fix
Priority LOW 39
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03251 · Published 2017-07-13 · Partial fix CWE-476
