| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-13748 | 5.0 |
There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.
|
05-02-2021 - 14:53 | 29-08-2017 - 06:29 | |
| CVE-2017-14132 | 4.3 |
JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0
|
03-02-2021 - 04:15 | 04-09-2017 - 20:29 | |
| CVE-2017-14132 | 4.3 |
JasPer 2.0.13 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.
|
25-09-2020 - 12:15 | 04-09-2017 - 20:29 | |
| CVE-2016-8690 | 4.3 |
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
|
22-11-2018 - 11:29 | 15-02-2017 - 19:59 | |
| CVE-2015-5203 | 4.3 |
Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
|
22-11-2018 - 11:29 | 02-08-2017 - 19:29 | |
| CVE-2015-5221 | 4.3 |
Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
|
22-11-2018 - 11:29 | 25-07-2017 - 18:29 |