CVE catalog

CVE-2018-18873

jasper - security update

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.37% · Oct 25, 2026

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntujasper16.041.900.1-debian1-2.4vulnerable
Ubuntujasper16.041.900.1-debian1-2.4ubuntu1vulnerable
Ubuntujasper16.041.900.1-debian1-2.4ubuntu1.1vulnerable
Ubuntujasper16.041.900.1-debian1-2.4ubuntu1.2vulnerable
Ubuntujasper16.041.900.1-debian1-2.4ubuntu1.3fixed
Debianjasper81.900.1-debian1-2.4vulnerable
Debianjasper81.900.1-debian1-2.4+deb8u1vulnerable
Debianjasper81.900.1-debian1-2.4+deb8u2vulnerable
Debianjasper81.900.1-debian1-2.4+deb8u3vulnerable
Debianjasper81.900.1-debian1-2.4+deb8u4vulnerable
Debianjasper81.900.1-debian1-2.4+deb8u5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntujasperdeb16.041.900.1-debian1-2.4ubuntu1.3Not reportedUBUNTU-CVE-2018-18873Not reported
Debianjasperdeb81.900.1-debian1-2.4+deb8u5Not reportedDLA-1628-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]