Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 618478 - media-libs/jasper CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)
Summary: media-libs/jasper CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bin...
Status: RESOLVED DUPLICATE of bug 614028
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: https://bugzilla.redhat.com/show_bug....
Whiteboard: A3 [upstream]
Keywords:
Depends on:
Blocks:
 
Reported: 2017-05-15 00:10 UTC by Volkan
Modified: 2017-05-15 06:56 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Volkan 2017-05-15 00:10:08 UTC 
The jas_matrix_bindsub function in jas_seq.c in JasPer allows attackers to cause a denial of service (invalid read) via a crafted image.

References:

https://blogs.gentoo.org/ago/2017/01/25/jasper-invalid-memory-read-in-jas_matrix_bindsub-jas_seq-c/
http://www.openwall.com/lists/oss-security/2017/01/25/9

Upstream bug:

https://github.com/mdadams/jasper/issues/113
Comment 1 Agostino Sarubbo gentoo-dev 2017-05-15 06:56:21 UTC 

*** This bug has been marked as a duplicate of bug 614028 ***