First published: Tue Mar 27 2018(Updated: )
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jasper Project Jasper | =2.0.14 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this JasPer vulnerability is CVE-2018-9055.
The severity rating of CVE-2018-9055 is medium, with a severity value of 5.5.
This vulnerability can be exploited through a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
The affected version of JasPer is 2.0.14.
Yes, a fix for this vulnerability is available.