Bug 618478

Summary:	media-libs/jasper CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)
Product:	Gentoo Security	Reporter:	Volkan <vBugZilla>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=1435324
Whiteboard:	A3 [upstream]
Package list:		Runtime testing required:	---

Description Volkan 2017-05-15 00:10:08 UTC

The jas_matrix_bindsub function in jas_seq.c in JasPer allows attackers to cause a denial of service (invalid read) via a crafted image.

References:

https://blogs.gentoo.org/ago/2017/01/25/jasper-invalid-memory-read-in-jas_matrix_bindsub-jas_seq-c/
http://www.openwall.com/lists/oss-security/2017/01/25/9

Upstream bug:

https://github.com/mdadams/jasper/issues/113

Comment 1 Agostino Sarubbo gentoo-dev

2017-05-15 06:56:21 UTC


*** This bug has been marked as a duplicate of bug 614028 ***