CVE-2014-8138: Buffer Overflow
Published Dec 24, 2014
·Updated
Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
Affected Software
3 affected components
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
Jasper Project Jasper=1.900.1
Event History
Dec 24, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8138?
CVE-2014-8138 has a high severity rating due to the potential for remote code execution or denial of service.
2
How do I fix CVE-2014-8138?
To fix CVE-2014-8138, upgrade JasPer to version 1.900.2 or later.
3
What causes the buffer overflow in CVE-2014-8138?
The buffer overflow in CVE-2014-8138 is caused by improper handling of crafted JPEG 2000 files in the jp2_decode function.
4
Which software versions are affected by CVE-2014-8138?
CVE-2014-8138 affects JasPer versions up to 1.900.1 and specific versions of Red Hat Enterprise Linux 6.0 and 7.0.
5
What types of attacks can CVE-2014-8138 enable?
CVE-2014-8138 can enable denial of service attacks or allow attackers to execute arbitrary code remotely.