CVE-2018-20584 - jasper: DoS / hang when converting to jp2 format

MEDIUM

jasper: DoS / hang when converting to jp2 format

Published Dec 30, 2018

6.5

MEDIUM

CVSS 3.1

EPSS 2.89%

JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	netpbm	Not affected	n/a
Red Hat Enterprise Linux 6	jasper	Not affected	n/a
Red Hat Enterprise Linux 7	jasper	Not affected	n/a
Red Hat Enterprise Linux 8	jasper	Not affected	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

Link	Providers	Tags
http://www.securityfocus.com/bid/106356		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2018-20584		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1664864		Issue Tracking
https://github.com/mdadams/jasper/issues/192		x_refsource_MISCExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-20584
https://security.gentoo.org/glsa/201908-03		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2018-20584
https://www.oracle.com/security-alerts/cpuapr2020.html		x_refsource_MISCPatchThird Party Advisory