VDB
SUSE-SU-2021%3A0488-1
SUSE-SU-2021%3A0488-1
PUBLISHED
CVSS 7.800000190734863 HIGH
This update for jasper fixes the following issues: - bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls - bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | ||
| jasper | ||
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | ||
| libjasper4 | ||
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 | ||
| libjasper |
Timeline
- Feb 16, 2021 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_0488-1.json advisory
- https://www.suse.com/support/update/announcement/2021/suse-su-20210488-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008334.html advisory
- https://bugzilla.suse.com/1179748 advisory
- https://bugzilla.suse.com/1181483 advisory
- https://www.suse.com/security/cve/CVE-2020-27828/ advisory
- https://www.suse.com/security/cve/CVE-2021-3272/ advisory