Use-After-Free (UAF)

2018-08-0803:22:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.009 Low

EPSS

Percentile

83.2%

JSON

libjasper.so is affected by a use-after-free (UAF) vulnerability. This is due to the way tvp and tvp->buf are freed in the mif_process_cmpt function in libjasper/mif/mif_cod.c which would allow remote attackers to cause a denial of service using a crafted JPEG 2000 image file.

CPENameOperatorVersion
libjasper.soeq1.0.0
jaspereq1.900.1__29.el7
jaspereq1.900.1__15.el6_1.1
jaspereq1.900.1__16.el6_6.2
jaspereq1.900.1__16.el6_6.3
jaspereq1.900.1__15.el6
libjasper.soeq1.0.0
jaspereq1.900.1__29.el7
jaspereq1.900.1__15.el6_1.1
jaspereq1.900.1__16.el6_6.2

Name	Operator	Version
libjasper.so	eq	1.0.0
jasper	eq	1.900.1__29.el7
jasper	eq	1.900.1__15.el6_1.1
jasper	eq	1.900.1__16.el6_6.2
jasper	eq	1.900.1__16.el6_6.3
jasper	eq	1.900.1__15.el6
libjasper.so	eq	1.0.0
jasper	eq	1.900.1__29.el7
jasper	eq	1.900.1__15.el6_1.1
jasper	eq	1.900.1__16.el6_6.2