CVE-2018-18873 An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
MediumCVSS 5.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jasper project jasper | = 2.0.14 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp3 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 12-sp2 | No fix listed |
References
- openSUSE-SU-2020:1517 vendor-advisory
- openSUSE-SU-2020:1523 vendor-advisory
- github.com exploit third-party-advisory
- [debian-lts-announce] 20190102 [SECURITY] [DLA 1628-1] jasper security update mailing-list third-party-advisory
- GLSA-201908-03 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory