CVE-2017-6850
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to...
CVE-2017-6850 is a medium vulnerability (CVSS 5.5) in Jasper Project Jasper, published March 15, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in jasper 1.900.23-1.mga5.
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- Record
CVE-2017-6850- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- Record
CVE-2017-6850- Updated
- 2026-11-02
EUVDEUVD-2017-15904 No score
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- Record
EUVD-2017-15904- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4jr4-j3wj-73cj
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to...
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- Record
GHSA-4jr4-j3wj-73cj- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- Record
CVE-2017-6850- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-6850
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- Record
UBUNTU-CVE-2017-6850- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVMGASA-2017-0474 No score
Updated jasper packages fix security vulnerabilities
The jasper package has been updated and patched to fix several security issues.
- Record
MGASA-2017-0474- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10869-1 No score
jasper-2.0.33-1.2 on GA media
These are all security issues fixed in the jasper-2.0.33-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10869-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0946-1 No score
Security update for jasper
This update for jasper fixes the following issues:
Security issues fixed:
- CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec (bsc#1012530)
- CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment (bsc#1010977).
- CVE-2016-9398: jpc_math.c:94: int jpc_floorlog2(int): Assertion 'x > 0' failed. (bsc#1010979)
- CVE-2016-9560: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (bsc#1011830)
- CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400)
- CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy (bsc#1015993)
- CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088)
- CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497)
- CVE-2017-5498: left-shift undefined behaviour (bsc#1020353)
- CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868)
- Record
SUSE-SU-2017:0946-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0953-1 No score
Security update for jasper
This update for jasper fixes the following issues:
Security issues fixed:
- CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088)
- CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497)
- CVE-2017-5498: left-shift undefined behaviour (bsc#1020353)
- CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868)
- CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400)
- Record
SUSE-SU-2017:0953-1- Updated
- 2026-11-02
OSVUSN-3693-1 No score
jasper vulnerabilities
It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
- Record
USN-3693-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jasperMageia:5 |
before 1.900.23-1.mga5 | 1.900.23-1.mga5 |
jasperSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 1.900.14-134.32.1 | 1.900.14-134.32.1 |
jasperSUSE:Linux Enterprise Server 11 SP4 |
before 1.900.14-134.32.1 | 1.900.14-134.32.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 1.900.14-134.32.1 | 1.900.14-134.32.1 |
jasperSUSE:Linux Enterprise Desktop 12 SP1 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperSUSE:Linux Enterprise Desktop 12 SP2 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperSUSE:Linux Enterprise Server 12 SP1 |
before 1.900.14-194.1 | 1.900.14-194.1 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jasperSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperSUSE:Linux Enterprise Server 12 SP2 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 1.900.14-194.1 | 1.900.14-194.1 |
jasperUbuntu:14.04:LTS |
before 1.900.1-14ubuntu3.5, plus listed versions 1.900.1-141.900.1-14ubuntu31.900.1-14ubuntu3.11.900.1-14ubuntu3.21.900.1-14ubuntu3.31.900.1-14ubuntu3.4 |
1.900.1-14ubuntu3.5 |
jasperUbuntu:16.04:LTS |
before 1.900.1-debian1-2.4ubuntu1.2, plus listed versions 1.900.1-debian1-2.41.900.1-debian1-2.4ubuntu11.900.1-debian1-2.4ubuntu1.1 |
1.900.1-debian1-2.4ubuntu1.2 |
jasperopenSUSE:Tumbleweed |
before 2.0.33-1.2 | 2.0.33-1.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
blogs.gentoo.org/ago/2017/01/25/jasper-null-pointer-dereference-in-jp2_cdef_destroy-jp2_cod-c
github.com/mdadams/jasper/commit/e96fc4fdd525fa0ede28074a7e2b1caf94b58b0d
usn.ubuntu.com/3693-1
nvd.nist.gov/vuln/detail/CVE-2017-6850
Show 85 moreShow less
advisories.mageia.org/MGASA-2017-0474.html
bugs.mageia.org/show_bug.cgi?id=19605
lists.fedoraproject.org/archives/list/[email protected]/thread/THLEZURI4D24PRM7SMASC5I25IAWXXTM
lists.opensuse.org/opensuse-updates/2016-11/msg00010.html
suse.com/support/update/announcement/2017/suse-su-20170946-1
bugzilla.suse.com/1010977
ubuntu.com/security/CVE-2017-6850
openwall.com/lists/oss-security/2017/01/25/8
cve.org/CVERecord?id=CVE-2017-6850