Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 618482 - media-libs/jasper CVE-2017-5503 jasper: invalid memory write in dec_clnpass()
Summary: media-libs/jasper CVE-2017-5503 jasper: invalid memory write in dec_clnpass()
Status: RESOLVED DUPLICATE of bug 614028
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: https://bugzilla.redhat.com/show_bug....
Whiteboard: A3 [upstream]
Keywords:
Depends on:
Blocks:
 
Reported: 2017-05-15 00:30 UTC by Volkan
Modified: 2017-05-15 06:57 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Volkan 2017-05-15 00:30:15 UTC 
A vulnerability was found in jasper. A crafted file could cause an invalid memory write.

References:

http://seclists.org/oss-sec/2017/q1/102

Upstream bug:

https://github.com/mdadams/jasper/issues/90
Comment 1 Agostino Sarubbo gentoo-dev 2017-05-15 06:57:16 UTC 

*** This bug has been marked as a duplicate of bug 614028 ***