CVE-2018-19542

Published: 26 November 2018

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
jasper Launchpad, Ubuntu, Debian	Upstream	Needs triage
	Ubuntu 21.04 (Hirsute Hippo)	Does not exist
	Ubuntu 20.10 (Groovy Gorilla)	Does not exist
	Ubuntu 20.04 LTS (Focal Fossa)	Does not exist
	Ubuntu 18.04 LTS (Bionic Beaver)	Does not exist
	Ubuntu 16.04 LTS (Xenial Xerus)	Released (1.900.1-debian1-2.4ubuntu1.3)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was needed)
	Patches: Upstream: https://github.com/jasper-software/jasper/commit/839b1bcf0450ff036c28e8db40a7abf886e02891

Notes

Author	Note
mdeslaur	same fix as CVE-2018-9782

References

Bugs

https://github.com/mdadams/jasper/issues/182

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM