Known vulnerabilities in jasper (Alpine package)

Vendor: Alpine Linux Development Team
Software: jasper (Alpine package)
Software CPE: cpe:2.3:o:alpine:jasper_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jasper (Alpine package) jasper (Alpine package) is affected by 20 known vulnerabilities: 6 high, 11 medium, 3 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33343 - Heap-based Buffer Overflow
CVE-2016-2090		 CWE-122 High
No
No
 - 04.08.2020 SB2017011315
SB2016091513
SB2016072023
and 5 more
#VU30444 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-8366		 CWE-94 High
No
No
 - 14.01.2020 SB20200114103
SB2017061612
SB2017061613
and 5 more
#VU30445 - Improper Initialization
CVE-2015-8367		 CWE-665 High
No
No
 - 14.01.2020 SB20200114103
SB2017061614
SB2017061615
and 6 more
#VU15956 - NULL Pointer Dereference
CVE-2017-1000050		 CWE-476 Low
No
No
 1.900.1-r13, 2.0.10-r2 19.11.2018 SB2017121003
SB2018103010
SB20170807104
and 2 more
#VU33040 - Improper input validation
CVE-2018-17141		 CWE-20 High
No
No
 - 21.09.2018 SB2018092212
SB2018092122
SB2018100937
and 5 more
#VU33529 - Double Free
CVE-2015-5203		 CWE-415 Low
No
No
 1.900.1-r10, 1.900.1-r11 02.08.2017 SB2015092103
SB2016091525
SB2016091526
#VU33248 - Out-of-bounds read
CVE-2015-9099		 CWE-125 Low
No
No
 - 25.06.2017 SB2017062504
SB2017080799
SB2020090331
and 1 more
#VU33249 - NULL Pointer Dereference
CVE-2015-9100		 CWE-476 Medium
No
No
 - 25.06.2017 SB2017062505
SB2017080784
SB2020090332
and 2 more
#VU33253 - Missing release of memory after effective lifetime
CVE-2016-2116		 CWE-401 Medium
No
No
 1.900.1-r12, 1.900.1-r13 13.04.2016 SB2016041320
SB2016031110
#VU33251 - Improper input validation
CVE-2016-1577		 CWE-20 Medium
No
No
 1.900.1-r12, 1.900.1-r13 13.04.2016 SB2016041319
SB2016031108
#VU33252 - Improper input validation
CVE-2016-2089		 CWE-20 Medium
No
No
 1.900.1-r12, 1.900.1-r13 08.02.2016 SB2016020802
SB2016031109
SB2016101134
and 5 more
#VU33267 - Stack-based buffer overflow
CVE-2014-8158		 CWE-121 Medium
No
No
 1.900.1-r10 26.01.2015 SB2015012605
SB2015092106
SB2015021106
and 6 more
#VU33266 - Heap-based Buffer Overflow
CVE-2014-8157		 CWE-122 Medium
No
No
 1.900.1-r10 26.01.2015 SB2015012604
SB2015092105
SB2015021106
and 6 more
#VU33265 - Heap-based Buffer Overflow
CVE-2014-8138		 CWE-122 Medium
No
No
 1.900.1-r10 24.12.2014 SB2014122402
SB2015092104
SB2015010803
and 6 more
#VU33250 - Improper input validation
CVE-2014-8137		 CWE-20 Medium
No
No
 1.900.1-r10 24.12.2014 SB2014122401
SB2015092102
SB2015010803
and 6 more
#VU33784 - Improper input validation
CVE-2014-9029		 CWE-20 Medium
No
No
 1.900.1-r9, 1.900.1-r10 08.12.2014 SB2014120836
SB2015012901
SB2015010803
and 6 more
#VU33329 - Heap-based Buffer Overflow
CVE-2011-4516		 CWE-122 Medium
No
No
 1.900.1-r4, 1.900.1-r5 15.12.2011 SB2011121503
SB2011122213
SB2011121402
and 6 more
#VU33330 - Heap-based Buffer Overflow
CVE-2011-4517		 CWE-122 Medium
No
No
 1.900.1-r4, 1.900.1-r5 15.12.2011 SB2011121504
SB2011122214
SB2011121402
and 5 more
#VU33264 - Memory corruption
CVE-2008-3522		 CWE-119 High
No
No
 1.900.1-r4, 1.900.1-r5 02.10.2008 SB2008100201
SB2011122211
SB2008121601
and 2 more
#VU33786 - Improper input validation
CVE-2008-3520		 CWE-20 High
No
No
 1.900.1-r4, 1.900.1-r5 02.10.2008 SB2008100202
SB2011122210
SB2008121601
and 2 more