cve.bz

CVE-2017-13745

7.5 highEPSS 3.9%

High (7.5) in jasper project jasper. EPSS 3.9% chance of exploitation in the next 30 days.

There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154.

Severity

CVSS 3.0

7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-11-01)
CWE
CWE-617
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON