Alpine/jasper: high 7.5
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
Action: Upgrade jasper to 2.0.10-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.10-r2 | - |
Fixed versions
| 2.0.10-r2 |
Sources
- osv: ALPINE-CVE-2017-1000050#Alpine:v3.6/jasper
- https://security.alpinelinux.org/vuln/CVE-2017-1000050
published · modified · JSON