遠端主機受到 GLSA-201908-03 中所述的弱點影響 (JasPer：多個弱點) 在 JasPer 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：如需詳細資料，請檢閱提及的 CVE 識別碼。因應措施：目前尚無已知的因應措施。

根據安裝的 jasper 套件版本，遠端主機上的 EulerOS 安裝會受到下列弱點影響：- 在 JasPer 1.900.17 之前的版本中，jpc_math.c 中的 jpc_floorlog2 函式可讓遠端攻擊者透過不明向量造成拒絕服務 (宣告失敗)。(CVE-2016-9398) - JasPer 2.0.14 允許在 libjasper/jpc/jpc_math.c 的 jpc_firstone 函式中，透過可連線的宣告造成拒絕服務。(CVE-2018-9055) - 在 JasPer 2.0.14 中發現一個問題。在 libjasper/base/jas_image.c 的 jas_image_readcmpt 函式中發生存取違規，進而導致拒絕服務。(CVE-2018-19539) - 在 JasPer 2.0.14 中發現一個問題。在 libjasper/base/jas_icc.c 的 jas_icctxtdesc_input 函式中發生大小為 1 的堆積型緩衝區溢位。(CVE-2018-19540) - 在 JasPer 2.0.14 中發現一個問題。在 libjasper/base/jas_image.c 的 jas_image_depalettize 函式中，存在一個大小為 8 的堆積型緩衝區過度讀取。(CVE-2018-19541) - 在 JasPer 2.0.14 中發現一個問題。在 libjasper/jp2/jp2_dec.c 的 jp2_decode 函式中發生 NULL 指標解除參照，進而導致拒絕服務。(CVE-2018-19542) – JasPer 2.0.12 中有很多記憶體洩漏問題 (在 base/jas_string.c 的 jas_strdup() 函式中觸發)，這將會導致遠端拒絕服務攻擊。(CVE-2017-13748) – 在 JasPer 2.0.12 中，jpc/jpc_dec.c 的 calcstepsizes() 函式中發生可連線的宣告中止，這將會導致遠端拒絕服務攻擊。(CVE-2017-13751) – 在 JasPer 2.0.10 中，jpc_t2dec.c 之 jpc_dec_decodepkt 函式中的堆積型緩衝區溢位，可讓遠端攻擊者透過特製的影像造成不明影響。(CVE-2017-6852) 請注意，Tenable Network Security 已直接從 EulerOS 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

根据安装的 jasper 程序包版本，远程主机上的 EulerOS 安装会受到下列漏洞影响：- 在 JasPer 1.900.17 之前的版本中，jpc_math.c 中的 jpc_floorlog2 函数可让远程攻击者通过不明向量造成拒绝服务（断言失败）。(CVE-2016-9398) - JasPer 2.0.14 允许在 libjasper/jpc/jpc_math.c 的 jpc_firstone 函数中，通过可访问的断言造成拒绝服务。(CVE-2018-9055) - 在 JasPer 2.0.14 中发现一个问题。在 libjasper/base/jas_image.c 的 jas_image_readcmpt 函数中发生访问违规，进而导致拒绝服务。(CVE-2018-19539) - 在 JasPer 2.0.14 中发现一个问题。在 libjasper/base/jas_icc.c 的 jas_icctxtdesc_input 函数中发生大小为 1 的基于堆的缓冲区溢出。(CVE-2018-19540) - 在 JasPer 2.0.14 中发现一个问题。在 libjasper/base/jas_image.c 的 jas_image_depalettize 函数中，存在一个大小为 8 的基于堆的缓冲区过度读取。(CVE-2018-19541) - 在 JasPer 2.0.14 中发现一个问题。在 libjasper/jp2/jp2_dec.c 的 jp2_decode 函数中发生空指针取消引用，进而导致拒绝服务。(CVE-2018-19542) - JasPer 2.0.12 中有很多内存泄露问题（在 base/jas_string.c 的 jas_strdup() 函数中触发），这将会导致远程拒绝服务攻击。(CVE-2017-13748) - 在 JasPer 2.0.12 中，jpc/jpc_dec.c 的 calcstepsizes() 函数中发生可访问的断言终止，这将会导致远程拒绝服务攻击。(CVE-2017-13751) - 在 JasPer 2.0.10 中，jpc_t2dec.c 之 jpc_dec_decodepkt 函数中的基于堆的缓冲区溢出，可让远程攻击者通过特制的图像造成不明影响。(CVE-2017-6852) 请注意，Tenable Network Security 已直接从 EulerOS 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

远程主机受到 GLSA-201908-03 中所述漏洞的影响（JasPer：多个漏洞）在 JasPer 中发现多个漏洞。请检查下面供参考的 CVE 标识符以了解详细信息。影响：如需详细信息，请查看供参考的 CVE 标识符。解决方法：目前无任何已知的解决方法。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 JasPer 2.0.12 的 jpc/jpc_dec.c 中，calcstepsizes() 函式發生可連線的宣告中止，這將導致遠端拒絕服務攻擊。 (CVE-2017-13751)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 JasPer 2.0.12 范围内的 jpc/jpc_dec.c 中的函数 calcstepsizes() 中存在可访问的断言中止，将导致远程拒绝服务攻击。 (CVE-2017-13751)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2b151590d9 advisory.

  - The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause     a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. (CVE-2016-9396)

  - The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9397)

  - The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via unspecified vectors. (CVE-2016-9398)

  - The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9399)

  - There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer     2.0.12 that will lead to a remote denial of service attack by triggering an unexpected     jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154. (CVE-2017-13745)

  - There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer     2.0.12 that will lead to a remote denial of service attack. (CVE-2017-13746)

  - There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13747)

  - There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in     base/jas_string.c, that will lead to a remote denial of service attack. (CVE-2017-13748)

  - There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13749)

  - There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer     2.0.12 that will lead to a remote denial of service attack. (CVE-2017-13750)

  - There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13751)

  - There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13752)

  - JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17,     1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27,     1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8,     2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of     service (heap-based buffer over-read and application crash) via a crafted image, related to the     jas_image_ishomosamp function in libjasper/base/jas_image.c. (CVE-2017-14132)

  - JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check     to see if the image contained at least one component resulting in a denial-of-service. (CVE-2017-1000050)

  - There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an     attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality,     integrity, or application availability. (CVE-2020-27828)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13751)

Note that Nessus relies on the presence of the package as reported by the vendor.

報告されたすべてのCVE修正を含む新しいUpstreamバージョン2.0.24が利用可能です。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - JasPer 2.0.12 の jpc/jpc_dec.c の calcstepsizes() 関数に、到達可能なアサーションアボートがあります。これにより、リモートの DoS 攻撃（サービス拒否攻撃）が引き起こされます。 （CVE-2017-13751）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote host is affected by the vulnerability described in GLSA-201908-03 (JasPer: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in JasPer. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in JasPer 2.0.14. There is a     heap-based buffer overflow of size 1 in the function     jas_icctxtdesc_input in     libjasper/base/jas_icc.c.(CVE-2018-19540)

  - An issue was discovered in JasPer 2.0.14. There is a     heap-based buffer over-read of size 8 in the function     jas_image_depalettize in     libjasper/base/jas_image.c.(CVE-2018-19541)

  - An issue was discovered in JasPer 2.0.14. There is a     NULL pointer dereference in the function jp2_decode in     libjasper/jp2/jp2_dec.c, leading to a denial of     service.(CVE-2018-19542)

  - An issue was discovered in JasPer 2.0.14. There is an     access violation in the function jas_image_readcmpt in     libjasper/base/jas_image.c, leading to a denial of     service.(CVE-2018-19539)

  - Heap-based buffer overflow in the jpc_dec_decodepkt     function in jpc_t2dec.c in JasPer 2.0.10 allows remote     attackers to have unspecified impact via a crafted     image.(CVE-2017-6852)

  - JasPer 2.0.14 allows denial of service via a reachable     assertion in the function jpc_firstone in     libjasper/jpc/jpc_math.c.(CVE-2018-9055)

  - The jpc_floorlog2 function in jpc_math.c in JasPer     before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via unspecified     vectors.(CVE-2016-9398)

  - There are lots of memory leaks in JasPer 2.0.12,     triggered in the function jas_strdup() in     base/jas_string.c, that will lead to a remote denial of     service attack.(CVE-2017-13748)

  - There is a reachable assertion abort in the function     calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that     will lead to a remote denial of service     attack.(CVE-2017-13751)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The jpc_floorlog2 function in jpc_math.c in JasPer     before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via unspecified     vectors.(CVE-2016-9398)

  - JasPer 2.0.14 allows denial of service via a reachable     assertion in the function jpc_firstone in     libjasper/jpc/jpc_math.c.(CVE-2018-9055)

  - An issue was discovered in JasPer 2.0.14. There is an     access violation in the function jas_image_readcmpt in     libjasper/base/jas_image.c, leading to a denial of     service.(CVE-2018-19539)

  - An issue was discovered in JasPer 2.0.14. There is a     heap-based buffer overflow of size 1 in the function     jas_icctxtdesc_input in     libjasper/base/jas_icc.c.(CVE-2018-19540)

  - An issue was discovered in JasPer 2.0.14. There is a     heap-based buffer over-read of size 8 in the function     jas_image_depalettize in     libjasper/base/jas_image.c.(CVE-2018-19541)

  - An issue was discovered in JasPer 2.0.14. There is a     NULL pointer dereference in the function jp2_decode in     libjasper/jp2/jp2_dec.c, leading to a denial of     service.(CVE-2018-19542)

  - There are lots of memory leaks in JasPer 2.0.12,     triggered in the function jas_strdup() in     base/jas_string.c, that will lead to a remote denial of     service attack.(CVE-2017-13748)

  - There is a reachable assertion abort in the function     calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that     will lead to a remote denial of service     attack.(CVE-2017-13751)

  - Heap-based buffer overflow in the jpc_dec_decodepkt     function in jpc_t2dec.c in JasPer 2.0.10 allows remote     attackers to have unspecified impact via a crafted     image.(CVE-2017-6852)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-0a6290f865 advisory.

  - The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause     a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. (CVE-2016-9396)

  - The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9397)

  - The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via unspecified vectors. (CVE-2016-9398)

  - The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9399)

  - There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer     2.0.12 that will lead to a remote denial of service attack by triggering an unexpected     jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154. (CVE-2017-13745)

  - There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer     2.0.12 that will lead to a remote denial of service attack. (CVE-2017-13746)

  - There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13747)

  - There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in     base/jas_string.c, that will lead to a remote denial of service attack. (CVE-2017-13748)

  - There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13749)

  - There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer     2.0.12 that will lead to a remote denial of service attack. (CVE-2017-13750)

  - There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13751)

  - There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13752)

  - JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17,     1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27,     1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8,     2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of     service (heap-based buffer over-read and application crash) via a crafted image, related to the     jas_image_ishomosamp function in libjasper/base/jas_image.c. (CVE-2017-14132)

  - JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check     to see if the image contained at least one component resulting in a denial-of-service. (CVE-2017-1000050)

  - There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an     attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality,     integrity, or application availability. (CVE-2020-27828)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

JasPer NEWS :

- Fix CVE-2018-9154

- Fix CVE-2018-19541

- Fix CVE-2016-9399, CVE-2017-13751

- Fix CVE-2018-19540

- Fix CVE-2018-9055

- Fix CVE-2017-13748

- Fix CVE-2017-5503, CVE-2017-5504, CVE-2017-5505

- Fix CVE-2018-9252

- Fix CVE-2018-19139

- Fix CVE-2018-19543, CVE-2017-9782

- Fix CVE-2018-20570

- Fix CVE-2018-20622

- Fix CVE-2016-9398

- Fix CVE-2017-14132

- Fix CVE-2017-5499

- Fix CVE-2018-18873

- Fix CVE-2017-13750

インストールされているjasperパッケージのバージョンによると、リモートホストへのEulerOSのインストールは、次の脆弱性の影響を受けます。- 1.900.17より前のJasPerのjpc_math.cにあるjpc_floorlog2関数により、詳細不明なベクトルを介してリモートの攻撃者がサービス拒否（アサーションエラー）を引き起こす可能性があります。（CVE-2016-9398）- JasPer 2.0.14ではlibjasper/jpc/jpc_math.cの関数jpc_firstoneにある到達可能なアサーションを介したサービス拒否が許可されます。（CVE-2018-9055）- JasPer 2.0.14で問題が発見されました。libjasper/base/jas_image.cの関数jas_image_readcmptにアクセス違反があり、サービス拒否につながります。（CVE-2018-19539）- JasPer 2.0.14で問題が発見されました。libjasper/base/jas_icc.cの関数jas_icctxtdesc_inputにサイズ1のヒープベースバッファオーバーフローがあります。（CVE-2018-19540）- JasPer 2.0.14で問題が発見されました。libjasper/base/jas_image.cの関数jas_image_depalettizeにサイズ8のヒープベースのバッファオーバーリードがあります。（CVE-2018-19541）- JasPer 2.0.14で問題が見つかりました。libjasper/jp2/jp2_dec.cの関数jp2_decodeにNULLポインターの逆参照があり、サービス拒否につながります。（CVE-2018-19542）- JasPer 2.0.12には、base/jas_string.cの関数jas_strdup()でトリガーされる多くのメモリリークがあり、リモートのサービス拒否攻撃につながります。（CVE-2017-13748）- JasPer 2.0.12のjpc/jpc_dec.cにある関数calcstepsizes()に到達可能なアサーションアボートがあり、リモートのサービス拒否攻撃につながります。（CVE-2017-13751）- JasPer 2.0.10のjpc_t2dec.cにあるjpc_dec_decodepkt関数のヒープベースバッファオーバーフローにより、リモートの攻撃者が細工されたイメージを介して詳細不明な影響を与える可能性があります。（CVE-2017-6852）注：Tenable Network Securityは、前述の記述ブロックをEulerOSセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

JasPerニュース: 

- CVE-2018-9154の修正

- CVE-2018-19541の修正

- CVE-2016-9399、CVE-2017-13751の修正

- CVE-2018-19540の修正

- CVE-2018-9055の修正

- CVE-2017-13748の修正

- CVE-2017-5503、CVE-2017-5504、CVE-2017-5505の修正

- CVE-2018-9252の修正

- CVE-2018-19139の修正

- CVE-2018-19543、CVE-2017-9782の修正

- CVE-2018-20570の修正

- CVE-2018-20622の修正

- CVE-2016-9398の修正

- CVE-2017-14132の修正

- CVE-2017-5499の修正

- CVE-2018-18873の修正

- CVE-2017-13750の修正

リモートホストは、GLSA-201908-03（JasPer：複数の脆弱性）で説明されている脆弱性による影響を受けます。複数の脆弱性がJasPerで発見されています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：詳細については、記載されているCVE識別番号を参照してください。回避策：現時点では、既知の回避策はありません。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
127561	GLSA-201908-03：JasPer：多個弱點	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
131643	EulerOS 2.0 SP2：jasper (EulerOS-SA-2019-2490)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
131643	EulerOS 2.0 SP2：jasper (EulerOS-SA-2019-2490)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
127561	GLSA-201908-03：JasPer：多个漏洞	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
220728	Linux Distros 未修補弱點：CVE-2017-13751	Nessus	Misc.	2025/3/4	2025/3/4	high
220728	Linux Distros 未修补的漏洞: CVE-2017-13751	Nessus	Misc.	2025/3/4	2025/3/4	high
145784	Fedora 33 : jasper (2021-2b151590d9)	Nessus	Fedora Local Security Checks	2021/2/1	2024/1/25	high
220728	Linux Distros Unpatched Vulnerability : CVE-2017-13751	Nessus	Misc.	2025/3/4	2025/3/4	high
145784	Fedora 33：jasper（2021-2b151590d9）	Nessus	Fedora Local Security Checks	2021/2/1	2024/1/25	high
220728	Linux Distros のパッチ未適用の脆弱性: CVE-2017-13751	Nessus	Misc.	2025/3/4	2025/3/4	high
127561	GLSA-201908-03 : JasPer: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
132133	EulerOS 2.0 SP3 : jasper (EulerOS-SA-2019-2598)	Nessus	Huawei Local Security Checks	2019/12/18	2024/4/4	high
131643	EulerOS 2.0 SP2 : jasper (EulerOS-SA-2019-2490)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
146125	Fedora 32 : jasper (2021-0a6290f865)	Nessus	Fedora Local Security Checks	2021/2/4	2024/1/24	high
139830	FreeBSD : jasper -- multiple vulnerabilities (6842ac7e-d250-11ea-b9b7-08002728f74c)	Nessus	FreeBSD Local Security Checks	2020/8/26	2024/2/23	high
131643	EulerOS 2.0 SP2：jasper（EulerOS-SA-2019-2490）	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
139830	FreeBSD：jasper -- 複数の脆弱性（6842ac7e-d250-11ea-b9b7-08002728f74c）	Nessus	FreeBSD Local Security Checks	2020/8/26	2024/2/23	high
127561	GLSA-201908-03：JasPer：複数の脆弱性	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
146125	Fedora 32：jasper（2021-0a6290f865）	Nessus	Fedora Local Security Checks	2021/2/4	2024/1/24	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high