Bug 1472888 (CVE-2017-1000050) - CVE-2017-1000050 jasper: NULL pointer exception in jp2_encode()
Summary: CVE-2017-1000050 jasper: NULL pointer exception in jp2_encode()
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2017-1000050
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1434464 1434465 1434467 1585830 1910579
Blocks: 1449402
TreeView+ depends on / blocked
 
Reported: 2017-07-19 15:20 UTC by Andrej Nemec
Modified: 2022-05-17 10:24 UTC (History)
14 users (show)

Fixed In Version: jasper 2.0.13
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-06-08 03:17:06 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2018:3253 0 None None None 2018-10-30 07:54:50 UTC

Description Andrej Nemec 2017-07-19 15:20:48 UTC
JasPer is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.

References:

http://www.openwall.com/lists/oss-security/2017/03/06/1

Comment 1 Andrej Nemec 2017-07-19 15:21:55 UTC
Created jasper tracking bugs for this issue:

Affects: fedora-all [bug 1434464]


Created mingw-jasper tracking bugs for this issue:

Affects: epel-7 [bug 1434465]
Affects: fedora-all [bug 1434467]

Comment 2 Tomas Hoger 2017-08-24 12:11:00 UTC
Upstream bug report:

https://github.com/mdadams/jasper/issues/120

Upstream commit:

https://github.com/mdadams/jasper/commit/58ba0365d911b9f9dd68e9abf826682c0b4f2293

The fix is included in version 2.0.13.

This bug is in encoder, therefore applications that only use jasper to read JPEG2000 images are not affected, it only affects applications that read untrusted images and convert them to JPEG2000 format using jasper.

Comment 8 errata-xmlrpc 2018-10-30 07:54:38 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2018:3253 https://access.redhat.com/errata/RHSA-2018:3253


Note You need to log in before you can comment on or make changes to this bug.