CVE-2017-13745
Severity
7.5HIGH
EPSS
0.5%
top 34.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 29
Latest updateMay 13
Description
There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages1 packages
š“Vulnerability Details
3GHSAā¶
GHSA-w297-h5m6-hgp7: There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_decā2022-05-13
OSVā¶
CVE-2017-13745: There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_decā2017-08-29
CVEListā¶
CVE-2017-13745: There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_decā2017-08-29
šVendor Advisories
2š¬Community
6Bugzillaā¶
CVE-2018-19139 jasper: memory leak of data allocated in jpc_unk_getparms() after abort in jpc_dec_process_sot()ā2018-11-12
Bugzillaā¶
CVE-2016-10248 CVE-2016-10251 CVE-2017-1000050 CVE-2017-13745 CVE-2017-13746 CVE-2017-13747 CVE-2017-13748 CVE-2017-13749 CVE-2017-13750 CVE-2017-13751 CVE-2017-13752 CVE-2017-14132 CVE-2017-6850 CVE-ā2017-03-21
Bugzillaā¶
CVE-2016-10251 CVE-2017-1000050 CVE-2017-13745 CVE-2017-13746 CVE-2017-13747 CVE-2017-13748 CVE-2017-13749 CVE-2017-13750 CVE-2017-13751 CVE-2017-13752 CVE-2017-14132 CVE-2017-6850 CVE-2017-6851 CVE-2ā2017-03-21