CVE-2014-8158

CWE-119 — Buffer OverflowCWE-770 — Allocation without Limits12 documents7 sources
Severity
6.8MEDIUM
EPSS
6.2%
top 9.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Jasper Project JasperDebian Debian LinuxOpensuse Opensuse+1 more
Timeline
PublishedJan 26
Latest updateMay 14

Description

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶Ubuntujasper< 1.900.1-14ubuntu3.2
▶NVDopensuse/opensuse13.1, 13.2+1

Also affects: Debian Linux 7.0, Enterprise Linux 6.0, 7.0

🔴Vulnerability Details

3
GHSA
GHSA-r55x-7v7f-p64g: Multiple stack-based buffer overflows in jpc_qmfb↗2022-05-14
▶
CVEList
CVE-2014-8158: Multiple stack-based buffer overflows in jpc_qmfb↗2015-01-26
▶
OSV
CVE-2014-8158: Multiple stack-based buffer overflows in jpc_qmfb↗2015-01-22
▶

📋Vendor Advisories

3
Ubuntu
Ghostscript vulnerabilities↗2015-01-26
▶
Ubuntu
JasPer vulnerabilities↗2015-01-26
▶
Red Hat
jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001)↗2015-01-21
▶

💬Community

5
Bugzilla
CVE-2014-8157 CVE-2014-8158 mingw-jasper: various flaws [fedora-all]↗2015-01-22
▶
Bugzilla
CVE-2014-8157 CVE-2014-8158 mingw-jasper: various flaws [epel-7]↗2015-01-22
▶
Bugzilla
CVE-2014-8157 CVE-2014-8158 jasper: various flaws [fedora-all]↗2015-01-22
▶
Bugzilla
CVE-2014-8157 CVE-2014-8158 jasper: various flaws [epel-5]↗2015-01-22
▶
Bugzilla
CVE-2014-8158 jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001)↗2015-01-06
▶
CVE-2014-8158 (MEDIUM CVSS 6.8) | Multiple stack-based buffer overflo | cvebase.io