CVE-2018-20622

Reference Links

• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
• http://www.securityfocus.com/bid/106373
• https://github.com/mdadams/jasper/issues/193
• https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/155056
• https://www.ibm.com/support/pages/node/6235162 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6235162

Frequently Asked Questions

• What is the vulnerability ID for this issue?

  The vulnerability ID for this issue is CVE-2018-20622.

• What is the severity of CVE-2018-20622?

  The severity of CVE-2018-20622 is medium, with a severity value of 6.5.

• How does CVE-2018-20622 impact JasPer?

  CVE-2018-20622 in JasPer could allow a remote attacker to obtain sensitive information, caused by a memory leak when "--output-format jp2" is used.

• Which software versions are affected by CVE-2018-20622?

  JasPer 2.0.14, Debian Linux 8.0, IBM RDNG up to version 6.0.6.1, and IBM DOORS Next up to version 7.0 are affected by CVE-2018-20622.

• How can I fix the vulnerability in JasPer?

  To fix the vulnerability in JasPer, it is recommended to update to a patched version of JasPer.