Vulnerability CVE-2014-8138

Vulnerability CVE-2014-8138

Published: 2014-12-24

Description:

	Topic	Author	Date
High	JasPer 1.900.1 Double-Free / Heap Overflow	Google Security ...	20.12.2014

Type:

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Affected software
Redhat -> Enterprise linux
Jasper project -> Jasper

http://advisories.mageia.org/MGASA-2014-0539.html

http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html

http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html

http://lists.opensuse.org/opensuse-updates/2015-01/msg00017.html

http://packetstormsecurity.com/files/129660/JasPer-1.900.1-Double-Free-Heap-Overflow.html

http://rhn.redhat.com/errata/RHSA-2014-2021.html

http://rhn.redhat.com/errata/RHSA-2015-0698.html

http://rhn.redhat.com/errata/RHSA-2015-1713.html

http://www.debian.org/security/2014/dsa-3106

http://www.mandriva.com/security/advisories?name=MDVSA-2015:012

http://www.mandriva.com/security/advisories?name=MDVSA-2015:159

http://www.securityfocus.com/bid/71746

http://www.securitytracker.com/id/1033459

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606

http://www.ubuntu.com/usn/USN-2483-1

http://www.ubuntu.com/usn/USN-2483-2

https://www.ocert.org/advisories/ocert-2014-012.html