CVE-2018-19542CWE-476

CVE-2018-19542

Medium · published November 26, 2018

CVSS v3.0
6.5
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01946 · 80.0th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2018-11-26T08:29Z
Affected products (10)
ProductVersionsFixed in
jasper_project/jasperall versions—
canonical/ubuntu_linuxall versions—
suse/linux_enterprise_desktopall versions—
suse/linux_enterprise_desktopall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
debian/debian_linuxall versions—
opensuse/leapall versions—
References (8)
https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html · [email protected]https://www.oracle.com/security-alerts/cpuapr2020.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html · [email protected]https://github.com/mdadams/jasper/issues/182 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html · af854a3a-2127-422b-91ae-364da2661108https://github.com/mdadams/jasper/issues/182 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html · af854a3a-2127-422b-91ae-364da2661108https://www.oracle.com/security-alerts/cpuapr2020.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 26 NOV 03:00Z
    An issue was discovered in JasPer 2.0.14
    cvelistv5