VDB
BDU%3A2024-00902
BDU%3A2024-00902
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость функции jas_image_decode() кодировщика JPC набора библиотек JasPer, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Fedora Project, АО «НТЦ ИТ РОСА», The Jasper Project | Red Hat Enterprise Linux, Fedora, РОСА ХРОМ (запись в едином реестре российских программ №1607), JasPer | |
| n/a | n/a | n/a |
Timeline
- Jan 15, 2024 PoC Published
- Jan 16, 2024 CVE Published
- Jan 16, 2024 PoC Published
- Jan 19, 2024 PoC Published
- Feb 3, 2024 PoC Published
- Mar 5, 2025 CVE Updated
- Jun 16, 2025 PoC Published
References
- https://github.com/jasper-software/jasper/issues/367 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HNTGL7I5IJSQ4BZ5MGKWJPQYICUMHQ5I/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ/ url
- https://vuldb.com/ru/?id.250730 url
- https://access.redhat.com/security/cve/cve-2023-51257 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2649 url
- https://github.com/jasper-software/jasper/commit/aeef5293c978158255ad4f127089644745602f2a advisory
- https://github.com/jasper-software/jasper/releases/tag/version-4.1.2 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HNTGL7I5IJSQ4BZ5MGKWJPQYICUMHQ5I/ url