NetSight
high7.8

CVE-2018-19543

An issue was discovered in JasPer 2.0.14.

Impact

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.

Affected products

VendorProductAffected versions
Jasper ProjectJasper
Version 2.0.14
CanonicalUbuntu Linux
Versions 14.04, 16.04
DebianDebian Linux
Version 8.0
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Server
Versions 11, 12

Weakness classification

References