PT-2018-3088 · Jasper+2 · Jasper+2

Publicado

2018-11-25

·

Atualizado

2024-06-15

·

CVE-2018-19541

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.8 through 2.0.16
Description The issue is a heap-based buffer over-read of size 8 in the jas image depalettize function in libjasper/base/jas image.c. This can allow a remote attacker to impact data integrity and confidentiality or cause a denial of service.
Recommendations For JasPer versions 1.900.8 through 2.0.16, consider disabling the jas image depalettize function until a patch is available. Restrict access to the libjasper/base/jas image.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2019-1986
ALT-PU-2020-2972
ALT-PU-2020-2988
ALT-PU-2020-3065
BDU:2019-03830
CVE-2018-19541
DLA-1628-1
MGASA-2019-0381
OPENSUSE-SU-2019:2279-1
OPENSUSE-SU-2019:2282-1
OPENSUSE-SU-2019_2279-1
OPENSUSE-SU-2019_2282-1
OPENSUSE-SU-2024:10869-1
SUSE-SU-2019:2512-1
SUSE-SU-2019:2513-1

Produtos afetados

Alt Linux
Jasper
Suse