The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3672-1 advisory.

  - A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in     function cmdopts_parse that can cause a crash or segmentation fault. (CVE-2022-2963)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3673-1 advisory.

  - A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in     function cmdopts_parse that can cause a crash or segmentation fault. (CVE-2022-2963)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - jasper: heap-based buffer over-read of size 8 in jas_image_depalettize in libjasper/base/jas_image.c     (CVE-2018-19541)

  - jasper: heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2018-19543)

  - Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial     of service (crash) via a crafted file. (CVE-2017-5499)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - jasper: memory leaks in function cmdopts_parse (CVE-2022-2963)

  - JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in     libjasper/base/jas_image.c. (CVE-2022-40755)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

リモートの SUSE Linux SLES12 / SLES_SAP12 ホストには、SUSE-SU-2022:3672-1 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

  - jasper で脆弱性が見つかりました。このセキュリティの脆弱性は、cmdopts_parse 関数のメモリリークのバグが原因で発生します。これにより、クラッシュまたはセグメンテーション違反が発生する可能性があります。(CVE-2022-2963)

Nessus はこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートの SUSE Linux SLED15 / SLES15 / openSUSE 15 ホストには、SUSE-SU-2022:3673-1 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

  - jasper で脆弱性が見つかりました。このセキュリティの脆弱性は、cmdopts_parse 関数のメモリリークのバグが原因で発生します。これにより、クラッシュまたはセグメンテーション違反が発生する可能性があります。(CVE-2022-2963)

Nessus はこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

ID	名稱	產品	系列	已發布	已更新	嚴重性
166358	SUSE SLES12 Security Update : jasper (SUSE-SU-2022:3672-1)	Nessus	SuSE Local Security Checks	2022/10/21	2023/7/14	high
166360	SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2022:3673-1)	Nessus	SuSE Local Security Checks	2022/10/21	2023/7/14	high
198855	RHEL 8 : jasper (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
198833	RHEL 9 : jasper (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
166358	SUSE SLES12セキュリティ更新プログラム: jasper (SUSE-SU-2022:3672-1)	Nessus	SuSE Local Security Checks	2022/10/21	2023/7/14	high
166360	SUSE SLED15 / SLES15 / openSUSE 15 セキュリティ更新: jasper (SUSE-SU-2022:3673-1)	Nessus	SuSE Local Security Checks	2022/10/21	2023/7/14	high

偵測

搜尋 Plugin

high

high

high

high

high

high