MGASA-2020-0463
- Source
- https://advisories.mageia.org/MGASA-2020-0463.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0463.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0463
- Related
- Published
- 2020-12-17T13:10:41Z
- Modified
- 2020-12-17T12:30:49Z
- Summary
- Updated jasper packages fix security vulnerability
- Details
-
There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability (CVE-2020-27828).
- References
- Credits
-
-
- Mageia - COORDINATOR
-