CVE-2017-6850 PUBLISHED

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

EPSS 0.22% · 44.7th percentile

Risk Scores

EPSS Score
0.22%
44.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSjasper0, 1.900.1-14, 1.900.1-14ubuntu3
Ubuntu:16.04:LTSjasper0, 1.900.1-debian1-2.4, 1.900.1-debian1-2.4ubuntu1

Timeline

References

Open in Interactive Console →