CVE-2018-20622 JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
MediumCVSS 6.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jasper project jasper | = 2.0.14 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- openSUSE-SU-2020:1517 vendor-advisory
- openSUSE-SU-2020:1523 vendor-advisory
- 106373 third-party-advisory vdb-entry
- github.com third-party-advisory
- [debian-lts-announce] 20190102 [SECURITY] [DLA 1628-1] jasper security update mailing-list third-party-advisory
- www.oracle.com