cbcvebase.
CVE-2018-20584
published 2018-12-30

CVE-2018-20584: JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.

Affected

3 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
jasper_projectjasper
oracleoutside_in_technology

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM