PT-2021-17636 · Unknown+2 · Jasper Image Coding Toolkit+2

Lqiulin · Publicado 2020-09-02 · Atualizado 2024-06-15 · CVE-2021-27845

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

**Nome do software vulnerável e versões afetadas:

JasPer Image Coding Toolkit versão 2.0

Descrição:

Existe uma falha de divisão por zero no JasPer Image Coding Toolkit, especificamente no arquivo jasper/src/libjasper/jpc/jpc enc.c.

Recomendações:

Para o JasPer Image Coding Toolkit versão 2.0, no momento, não há informações sobre uma versão mais recente que contenha uma correção para essa falha.

Exploit

Correção

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

ALT-PU-2020-2721

ALT-PU-2020-2988

CVE-2021-27845

OESA-2021-1347

OPENSUSE-SU-2022:0562-1

OPENSUSE-SU-2022_0562-1

OPENSUSE-SU-2024:13389-1

SUSE-SU-2022:0561-1

SUSE-SU-2022:0562-1

SUSE-SU-2022:0562-2

SUSE-SU-2022_0561-1

SUSE-SU-2022_0562-1

SUSE-SU-2022_0562-2

Produtos afetados

Alt Linux

Jasper Image Coding Toolkit

Suse

Referências · 24

• 🔥 https://github.com/jasper-software/jasper/issues/194 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-27845 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2022/suse-su-20220561-1 · Nota
• https://suse.com/security/cve/CVE-2021-26926 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2022:0562-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2021-27845 · Nota de Segurança
• https://ubuntu.com/security/CVE-2021-27845 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2021-27845 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2021-1347 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-27845 · Nota
• https://suse.com/support/update/announcement/2022/suse-su-20220562-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2022:0562-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:13389-1 · Aviso do Fabricante
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1347 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-27845 · Nota de Segurança