CVE-2023-51257
CVE-2023-51257
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
CVSS 7.8 · High · EPSS 0.3%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
jasper Ubuntu:16.04:LTS
- Versions
- 1.900.1-debian1-2.4
- 1.900.1-debian1-2.4ubuntu1
- 1.900.1-debian1-2.4ubuntu1.1
- 1.900.1-debian1-2.4ubuntu1.2
- 1.900.1-debian1-2.4ubuntu1.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:16.04:LTS
- Versions
- 2:10.0-15.2
- 2:10.0-15.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:18.04:LTS
- Versions
- 2:10.0-15.3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:20.04:LTS
- Versions
- 2:10.0-15.3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencpn Ubuntu:20.04:LTS
- Versions
- 5.0.0+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:22.04:LTS
- Versions
- 2:10.0-15.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencpn Ubuntu:22.04:LTS
- Versions
- 5.2.4+dfsg-1
- 5.6.0+dfsg1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:24.04:LTS
- Versions
- 2:11.01.00-2build1
- 2:11.03.06-1
- 2:11.04.05-2
- 2:11.05.01-3
- 2:11.05.02-1
- 2:11.05.02-1.1
- 2:11.05.02-1.1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencpn Ubuntu:24.04:LTS
- Versions
- 5.8.4+dfsg-1
- 5.8.4+dfsg-1build3
- 5.8.4+dfsg-1build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:25.10
- Versions
- 2:11.09.02-2
- 2:11.10.02-1
- 2:11.10.02-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencpn Ubuntu:25.10
- Versions
- 1:5.10.2+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:26.10
- Versions
- 2:11.10.02-1build1
- 2:11.13.03+ds-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencpn Ubuntu:26.10
- Versions
- 1:5.12.4+dfsg-1
- 1:5.14.1+dfsg-3
- 1:5.14.1+dfsg-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
netpbm-free Ubuntu:26.04:LTS
- Versions
- 2:11.10.02-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencpn Ubuntu:26.04:LTS
- Versions
- 1:5.10.2+dfsg-1
- 1:5.12.4+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/jasper-software/jasper/issues/367
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HNTGL7I5IJSQ4BZ5MGKWJPQYICUMHQ5I/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HNTGL7I5IJSQ4BZ5MGKWJPQYICUMHQ5I/
- https://nvd.nist.gov/vuln/detail/CVE-2023-51257