CVE-2018-20622
6.5MEDIUMJasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
Publicado: 12/31/2018Actualizado: 5/6/2025
Descripción
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
Análisis IAImpulsado por IA
Productos Afectados
jasper_projectjasper
2.0.14
debiandebian_linux
8.0
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
- http://www.securityfocus.com/bid/106373Third Party AdvisoryVDB Entry
- https://github.com/mdadams/jasper/issues/193Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/01/msg00003.htmlThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
- http://www.securityfocus.com/bid/106373Third Party AdvisoryVDB Entry
- https://github.com/mdadams/jasper/issues/193Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/01/msg00003.htmlThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html