CVE-2018-19543CWE-125

CVE-2018-19543

High · published November 26, 2018

CVSS v3.0
7.8
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01553 · 74.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2018-11-26T08:29Z
Affected products (10)
ProductVersionsFixed in
jasper_project/jasperall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
debian/debian_linuxall versions—
suse/linux_enterprise_desktopall versions—
suse/linux_enterprise_desktopall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
suse/linux_enterprise_serverall versions—
References (8)
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html · [email protected]https://github.com/mdadams/jasper/issues/182 · [email protected]https://www.oracle.com/security-alerts/cpuapr2020.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html · af854a3a-2127-422b-91ae-364da2661108https://github.com/mdadams/jasper/issues/182 · af854a3a-2127-422b-91ae-364da2661108https://www.oracle.com/security-alerts/cpuapr2020.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 26 NOV 03:00Z
    An issue was discovered in JasPer 2.0.14
    cvelistv5