CVE-2017-1000050

HIGH

JasPer 2.0.12 - Denial of Service via NULL Pointer Dereference in jp2_encode

Title source: llm

Description

JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.

References (8)

Core 8

Core References

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2017/03/06/1

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:3253

Broken Link vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:3505

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/96595

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3693-1/

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201908-03

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/

Scores

CVSS v3 7.5

EPSS 0.0325

EPSS Percentile 86.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (8)

canonical/ubuntu_linux 14.04

canonical/ubuntu_linux 16.04

fedoraproject/fedora 32

fedoraproject/fedora 33

jasper_project/jasper 2.0.12

redhat/enterprise_linux_desktop 7.0

redhat/enterprise_linux_server 7.0

redhat/enterprise_linux_workstation 7.0

Published Jul 17, 2017

Tracked Since Feb 18, 2026