MGASA-2020-0337 - Updated jasper packages fix security vulnerabilities

Publication date: 18 Aug 2020
URL: https://advisories.mageia.org/MGASA-2020-0337.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2017-6851,
     CVE-2017-6852,
     CVE-2017-9782,
     CVE-2017-13745,
     CVE-2017-13746,
     CVE-2017-13748,
     CVE-2017-13749,
     CVE-2017-13750,
     CVE-2017-13751,
     CVE-2017-14132,
     CVE-2018-9252,
     CVE-2018-18873,
     CVE-2018-19139,
     CVE-2018-19543,
     CVE-2018-20570,
     CVE-2018-20622

The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote
attackers to cause a denial of service (invalid read) via a crafted image
(CVE-2017-6851).

Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in
JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted
image (CVE-2017-6852).

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based
buffer over-read and application crash) via a crafted image, related to the
jp2_decode function in libjasper/jp2/jp2_dec.c (CVE-2017-9782).

There is a reachable assertion abort in the function jpc_dec_process_sot() in
jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service
attack by triggering an unexpected jpc_ppmstabtostreams return value (CVE-2017-13745).

There is a reachable assertion abort in the function jpc_dec_process_siz() in
jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of
service attack (CVE-2017-13746).

There are lots of memory leaks in JasPer 2.0.12, triggered in the function
jas_strdup() in base/jas_string.c, that will lead to a remote denial of
service attack (CVE-2017-13748).

There is a reachable assertion abort in the function jpc_pi_nextrpcl() in
jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service
attack (CVE-2017-13749).

There is a reachable assertion abort in the function jpc_dec_process_siz() in
jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of
service attack (CVE-2017-13750).

There is a reachable assertion abort in the function calcstepsizes() in
jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service
attack (CVE-2017-13751).

JasPer 2.0.13 allows remote attackers to cause a denial of service (heap-based
buffer over-read and application crash) via a crafted image, related to the
jas_image_ishomosamp function in libjasper/base/jas_image.c (CVE-2017-14132).

JasPer 2.0.14 allows denial of service via a reachable assertion in the
function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c (CVE-2018-9252).

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference
in the function ras_putdatastd in ras/ras_enc.c (CVE-2018-18873).

An issue has been found in JasPer 2.0.14. There is a memory leak in
jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c (CVE-2018-19139).

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer
over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c
(CVE-2018-19543).

jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read
(CVE-2018-20570).

JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when
"--output-format jp2" is used (CVE-2018-20622).

References:
- https://bugs.mageia.org/show_bug.cgi?id=27045
- - https://security.gentoo.org/glsa/201908-03
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6851
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6852
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9782
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13745
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13746
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13748
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13749
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13750
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13751
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14132
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9252
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18873
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19139
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19543
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20570
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20622

SRPMS:
- 7/core/jasper-2.0.19-1.mga7