Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2018-18873
HistoryOct 31, 2018 - 12:00 a.m.

CVE-2018-18873

2018-10-3100:00:00
ubuntu.com
ubuntu.com
18

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.0%

JSON

An issue was discovered in JasPer 2.0.14. There is a NULL pointer
dereference in the function ras_putdatastd in ras/ras_enc.c.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchjasper< 1.900.1-debian1-2.4ubuntu1.3UNKNOWN

Related

nvd 1
prion 1
cvelist 1
veracode 1
redhatcve 1
osv 4
cve 1
nessus 13
ubuntu 1
openvas 7
debian 1
ibm 3
suse 2
mageia 1
gentoo 1
freebsd 1
oracle 2
nvd
nvd
CVE-2018-18873
2018-10-31 16:29:00
prion
prion
Null pointer dereference
2018-10-31 16:29:00
cvelist
cvelist
CVE-2018-18873
2018-10-31 16:00:00
veracode
veracode
Denial Of Service (DoS)
2018-11-01 08:15:29
redhatcve
redhatcve
CVE-2018-18873
2018-11-05 19:52:36
osv
osv
CVE-2018-18873
2018-10-31 16:29:00
jasper vulnerabilities
2021-01-11 12:42:31
jasper - security update
2019-01-02 00:00:00
cve
cve
CVE-2018-18873
2018-10-31 16:29:00
nessus
nessus
Ubuntu 16.04 LTS : JasPer vulnerabilities (USN-4688-1)
2021-01-11 00:00:00
RHEL 8 : jasper (Unpatched Vulnerability)
2024-05-11 00:00:00
SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2020:2689-1)
2020-12-09 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2021-01-11 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4688-1)
2021-01-12 00:00:00
Debian: Security Advisory (DLA-1628-1)
2019-01-02 00:00:00
openSUSE: Security Advisory for jasper (openSUSE-SU-2020:1517-1)
2020-09-25 00:00:00
debian
debian
[SECURITY] [DLA 1628-1] jasper security update
2019-01-02 22:57:11
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Change is deployed
2020-03-30 09:06:54
Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed
2020-12-22 18:18:53
Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities
2022-11-01 18:28:47
suse
suse
Security update for jasper (moderate)
2020-09-25 00:00:00
Security update for jasper (moderate)
2020-09-24 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2020-08-18 23:43:16
gentoo
gentoo
JasPer: Multiple vulnerabilities
2019-08-09 00:00:00
freebsd
freebsd
jasper -- multiple vulnerabilities
2020-07-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.0%

JSON
Related for UB:CVE-2018-18873
nvd1prion1cvelist1veracode1redhatcve1osv4cve1nessus13ubuntu1openvas7debian1ibm3suse2mageia1gentoo1freebsd1oracle2