Back to Database
Status published
Medium
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of...
Vulnerability Description
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20584
Credits & Attribution
No credits recorded in the NVD database.
References
More from jasper project
View All →CVE-2022-40755
JasPer 3.0.6 allows denial of service via a reachable assertion...
Medium
5.5
CVE-2021-3272
jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a...
Medium
5.5
CVE-2021-27845
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0...
Medium
5.5
CVE-2018-9252
JasPer 2.0.14 allows denial of service via a reachable assertion...
Medium
6.5
CVE-2018-9154
There is a reachable abort in the function jpc_dec_process_sot in...
High
7.5
Affected Vendor
jasper project
View all reports →Affected Software
jasper, debian linux, outside in technology
Vulnerable Versions:
2.0.14, 8.0, 8.5.4
Timeline
Official Publish:
December 30th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.