DeutschShown in its original language — a full translation is planned for a future version.
JasPer: Mehrere Schwachstelle ermöglicht Denial of Service
view advisory published 2017-08-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JasPer ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-13753US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9396. Reason: This candidate is a duplicate of CVE-2016-9396. Notes: All CVE users should reference CVE-2… | ||||
| CVE-2017-13752US | high7.5 | — | ||
There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. | ||||
| CVE-2017-13751US | high7.5 | — | ||
There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. | ||||
| CVE-2017-13750US | high7.5 | — | ||
There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack. | ||||
| CVE-2017-13749US | high7.5 | — | ||
There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack. | ||||
| CVE-2017-13748US | high7.5 | — | ||
There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack. | ||||
| CVE-2017-13747US | high7.5 | — | ||
There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack. | ||||
| CVE-2017-13746US | high7.5 | — | ||
There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack. | ||||
| CVE-2017-13745US | high7.5 | — | ||
There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an un… | ||||
02
references
External citations — patches, advisories, analysis.
- National Vulnerability Database #CVE-2017-13745 vom 2017-08-29external
- National Vulnerability Database #CVE-2017-13746 vom 2017-08-29external
- National Vulnerability Database #CVE-2017-13747 vom 2017-08-29external
- National Vulnerability Database #CVE-2017-13748 vom 2017-08-29external
- National Vulnerability Database #CVE-2017-13749 vom 2017-08-29external
- National Vulnerability Database #CVE-2017-13750 vom 2017-08-29external
- National Vulnerability Database #CVE-2017-13751 vom 2017-08-29external
- National Vulnerability Database #CVE-2017-13752 vom 2017-08-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan