CVE-2014-8138

Redhat Enterprise Linux - Memory Corruption

Title source: rule
STIX 2.1

Description

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

References (21)

Core 21
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-3106
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62619
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-01/msg00017.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/61747
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2483-2
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2483-1
Third Party Advisory, US Government Resource x_refsource_misc
https://www.ocert.org/advisories/ocert-2014-012.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62615
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033459
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62311
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71746
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2014-0539.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0698.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-2021.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1713.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2015:012
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2015:159

Scores

EPSS 0.1850
EPSS Percentile 96.9%

Details

CWE
CWE-119
Status published
Products (3)
jasper_project/jasper 1.900.1
redhat/enterprise_linux 6.0
redhat/enterprise_linux 7.0
Published Dec 24, 2014
Tracked Since Feb 18, 2026