An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function rasputdatastd in ras/rasenc.c.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"last_affected": "14.04"
},
{
"last_affected": "16.04"
}
]
},
{
"source": "CPE_FIELD",
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"last_affected": "8.0"
}
]
},
{
"source": "CPE_FIELD",
"cpes": [
"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp4:*:*:*:*:*:*"
],
"vendor_product": "suse:linux_enterprise_desktop",
"extracted_events": [
{
"last_affected": "12-sp3"
},
{
"last_affected": "12-sp4"
}
]
},
{
"source": "CPE_FIELD",
"cpes": [
"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*",
"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*",
"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*"
],
"vendor_product": "suse:linux_enterprise_server",
"extracted_events": [
{
"last_affected": "11-sp3"
},
{
"last_affected": "11-sp4"
},
{
"last_affected": "12-sp1"
},
{
"last_affected": "12-sp2"
}
]
}
]
}