CVE-2017-6851

CWE-125 — Out-of-bounds Read7 documents5 sources
Severity
5.5MEDIUM
EPSS
0.5%
top 36.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Jasper Project Jasper
Timeline
PublishedMar 15
Latest updateMay 14

Description

The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-6ww4-5qw3-6h8q: The jas_matrix_bindsub function in jas_seq↗2022-05-14
▶
CVEList
CVE-2017-6851: The jas_matrix_bindsub function in jas_seq↗2017-03-15
▶

📋Vendor Advisories

1
Red Hat
jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)↗2017-01-21
▶

💬Community

3
Bugzilla
CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)↗2017-03-23
▶
Bugzilla
CVE-2016-10248 CVE-2016-10251 CVE-2017-1000050 CVE-2017-13745 CVE-2017-13746 CVE-2017-13747 CVE-2017-13748 CVE-2017-13749 CVE-2017-13750 CVE-2017-13751 CVE-2017-13752 CVE-2017-14132 CVE-2017-6850 CVE-↗2017-03-21
▶
Bugzilla
CVE-2016-10251 CVE-2017-1000050 CVE-2017-13745 CVE-2017-13746 CVE-2017-13747 CVE-2017-13748 CVE-2017-13749 CVE-2017-13750 CVE-2017-13751 CVE-2017-13752 CVE-2017-14132 CVE-2017-6850 CVE-2017-6851 CVE-2↗2017-03-21
▶
CVE-2017-6851 (MEDIUM CVSS 5.5) | The jas_matrix_bindsub function in | cvebase.io