CVE-2015-8751

Katalog CVE

CVSS 8.8 · High EPSS 2,5%

Kerentanan Integer Overflow or Wraparound pada jasper project jasper. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.

Rincian

Terbit di NVD

17 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

2,5% peluang dieksploitasi; lebih tinggi dari 84,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread.html/re28d4c3c5b77138de47bf5b2ad04886d9104eb74ae3594e5f7254318%40%3Cdev.tomcat... mailing list · advisory vendor
• https://lists.apache.org/thread.html/rf15130c7b5f703664ce57a97934ffb8cc6065cbb1bf678dca8651519%40%3Cdev.tomcat... mailing list · advisory vendor
• http://www.openwall.com/lists/oss-security/2016/01/07/10 exploit · mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2016/01/08/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2016/01/11/3 mailing list · advisory pihak ketiga
• http://www.securityfocus.com/bid/80035 advisory pihak ketiga · vdb entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1294039 exploit · issue tracking · advisory pihak ketiga