CVE-2018-9252: Medium severity Jasper Project Jasper vulnerability

Published Apr 4, 2018

Updated

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpcabstorelstepsize in libjasper/jpc/jpcenc.c.

Affected Software

1 affected component

Jasper Project Jasper=2.0.14

Event History

Apr 4, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Data Sourced

via NVD·02:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-9252?

CVE-2018-9252 is a vulnerability in JasPer 2.0.14 that allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.

How severe is CVE-2018-9252?

CVE-2018-9252 has a severity rating of 6.5, which is considered medium.

How can I fix CVE-2018-9252?

To fix CVE-2018-9252, you should update to a patched version of JasPer.

Where can I find more information about CVE-2018-9252?

You can find more information about CVE-2018-9252 on the following references: [Reference 1](http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html), [Reference 2](http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html), [Reference 3](https://github.com/mdadams/jasper/issues/173).

What is the CWE ID of CVE-2018-9252?

The CWE ID of CVE-2018-9252 is 617.