Vulnerabilities > CVE-2020-27828

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

jasper-project

fedoraproject

NVD

Published: 2020-12-11

Updated: 2024-11-21

Summary

There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.

Vulnerable Configurations

Part	Description	Count
Application	Jasper_Project Jasper Project Jasper - Jasper Project Jasper 1.900.1 Jasper Project Jasper 1.900.2 Jasper Project Jasper 1.900.3 Jasper Project Jasper 1.900.4 Jasper Project Jasper 1.900.5 Jasper Project Jasper 1.900.6 Jasper Project Jasper 1.900.7 Jasper Project Jasper 1.900.8 Jasper Project Jasper 1.900.9 Jasper Project Jasper 1.900.10 Jasper Project Jasper 1.900.11 Jasper Project Jasper 1.900.12 Jasper Project Jasper 1.900.13 Jasper Project Jasper 1.900.14 Jasper Project Jasper 1.900.15 Jasper Project Jasper 1.900.16 Jasper Project Jasper 1.900.17 Jasper Project Jasper 1.900.18 Jasper Project Jasper 1.900.19 Jasper Project Jasper 1.900.20 Jasper Project Jasper 1.900.21 Jasper Project Jasper 1.900.22 Jasper Project Jasper 1.900.23 Jasper Project Jasper 1.900.24 Jasper Project Jasper 1.900.25 Jasper Project Jasper 1.900.26 Jasper Project Jasper 1.900.27 Jasper Project Jasper 1.900.28 Jasper Project Jasper 1.900.29 Jasper Project Jasper 1.900.30 Jasper Project Jasper 1.900.31 Jasper Project Jasper 2.0.0 Jasper Project Jasper 2.0.1 Jasper Project Jasper 2.0.2 Jasper Project Jasper 2.0.3 Jasper Project Jasper 2.0.4 Jasper Project Jasper 2.0.5 Jasper Project Jasper 2.0.6 Jasper Project Jasper 2.0.7 Jasper Project Jasper 2.0.8 Jasper Project Jasper 2.0.9 Jasper Project Jasper 2.0.10 Jasper Project Jasper 2.0.11 Jasper Project Jasper 2.0.12 Jasper Project Jasper 2.0.13 Jasper Project Jasper 2.0.14 Jasper Project Jasper 2.0.15 Jasper Project Jasper 2.0.16 Jasper Project Jasper 2.0.17 Jasper Project Jasper 2.0.19 Jasper Project Jasper 2.0.20 Jasper Project Jasper 2.0.21 Jasper Project Jasper 2.0.22	59
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33	2

Vulnerabilities > CVE-2020-27828 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-27828"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-27828