An issue was discovered in JasPer 2.0.14. There is an access violation in the function jasimagereadcmpt in libjasper/base/jas_image.c, leading to a denial of service.
{
"unresolved_ranges": [
{
"cpe": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "15.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "12-sp3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp4:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "12-sp4"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*",
"extracted_events": [
{
"last_affected": "11-sp3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11-sp4"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "12-sp1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "12-sp2"
}
],
"source": "CPE_FIELD"
}
]
}{
"cpe": "cpe:2.3:a:jasper_project:jasper:2.0.14:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "2.0.14"
}
],
"source": "CPE_FIELD"
}