Upgrade RHEL:7 libjpeg-turbo-static to version 0:1.2.90-8.el7 or higher. This issue was patched in RHSA-2019:2052 .

jasper vulnerabilities

Known vulnerabilities in the jasper package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L NULL Pointer Dereference	*
L Out-of-bounds Read	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
L Out-of-bounds Read	*
L Reachable Assertion	*
L Divide By Zero	*
M Improper Input Validation	<1.900.1-debian1-2.4ubuntu1.3
L Missing Release of Resource after Effective Lifetime	*
L CVE-2018-20584	*
L Out-of-bounds Read	*
L NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.3
L Reachable Assertion	*
L Out-of-bounds Read	*
L Out-of-bounds Read	*
L Out-of-bounds Write	*
L Missing Release of Resource after Effective Lifetime	*
L NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.3
M Out-of-Bounds	<1.900.1-debian1-2.4ubuntu1.1
L Reachable Assertion	*
L Reachable Assertion	*
L NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.2
M Use After Free	<1.900.1-debian1-2.4ubuntu1.1
L Out-of-bounds Read	*
L Reachable Assertion	*
L Missing Release of Resource after Effective Lifetime	*
L Double Free	<1.900.1-debian1-2.4ubuntu1.2
L Use After Free	<1.900.1-debian1-2.4ubuntu1.2
L NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.2
L Out-of-bounds Read	<1.900.1-debian1-2.4ubuntu1.3
M NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.1
L Improper Input Validation	<1.900.1-debian1-2.4ubuntu1.2
M NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.2
L Improper Input Validation	<1.900.1-debian1-2.4ubuntu1.2
L Reachable Assertion	*
L CVE-2016-9389	<1.900.1-debian1-2.4ubuntu1.2
L CVE-2016-9392	<1.900.1-debian1-2.4ubuntu1.2
L CVE-2016-9391	<1.900.1-debian1-2.4ubuntu1.2
M NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.1
L CVE-2016-9388	<1.900.1-debian1-2.4ubuntu1.2
L CVE-2016-9393	<1.900.1-debian1-2.4ubuntu1.2
L Reachable Assertion	*
L CVE-2016-9396	<1.900.1-debian1-2.4ubuntu1.2
L Integer Overflow or Wraparound	<1.900.1-debian1-2.4ubuntu1.2
L Reachable Assertion	*
M Integer Overflow or Wraparound	<1.900.1-debian1-2.4ubuntu1.1
L NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.2
M Integer Overflow or Wraparound	<1.900.1-debian1-2.4ubuntu1.1
L NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.2
M NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.2
L Out-of-Bounds	*
L Out-of-bounds Read	*
L Divide By Zero	<1.900.1-debian1-2.4ubuntu1.1
M Out-of-bounds Write	<1.900.1-debian1-2.4ubuntu1.1
L Double Free	<1.900.1-debian1-2.4ubuntu1.1
L NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.1
L Divide By Zero	<1.900.1-debian1-2.4ubuntu1.1
L Resource Management Errors	<1.900.1-debian1-2.4ubuntu1.2
M NULL Pointer Dereference	<1.900.1-debian1-2.4ubuntu1.1
M CVE-2016-1577	<1.900.1-debian1-2.4ubuntu1
L Resource Management Errors	<1.900.1-debian1-2.4ubuntu1
L Improper Input Validation	<1.900.1-debian1-2.4ubuntu1.1
L Out-of-Bounds	<1.900.1-debian1-2.4ubuntu1.1

Vulnerability

Vulnerable Version

NULL Pointer Dereference