Out-of-bounds write in JasPer - CVE-2023-51257

Vulnerability identifier: #VU85767

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-51257

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input within the jas_icctxt_input() function in jas_icc.c. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.

JasPer
Amazon Linux AMI
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
Desktop Applications Module
Basesystem Module
openSUSE Leap
Fedora
Oracle Solaris
Oracle Communications Cloud Native Core Unified Data Repository
libjasper-devel
libjasper1-debuginfo
libjasper1
jasper-debuginfo
jasper-debugsource
libjasper1-debuginfo-32bit
libjasper1-32bit
jasper
libjasper4
libjasper4-debuginfo
libjasper4-32bit
libjasper4-32bit-debuginfo
mingw-jasper
App Connect Enterprise Certified Container

Install updates from vendor's website.

JasPer - update to 4.1.2
libjasper-devel - addressed in versions 1.900.14-195.37.1, 2.0.14-150000.3.31.1
libjasper1-debuginfo - update to 1.900.14-195.37.1
libjasper1 - update to 1.900.14-195.37.1
jasper-debuginfo - addressed in versions 1.900.14-195.37.1, 2.0.14-150000.3.31.1
jasper-debugsource - addressed in versions 1.900.14-195.37.1, 2.0.14-150000.3.31.1
libjasper1-debuginfo-32bit - update to 1.900.14-195.37.1
libjasper1-32bit - update to 1.900.14-195.37.1
jasper - update to 2.0.14-150000.3.31.1
libjasper4 - update to 2.0.14-150000.3.31.1
libjasper4-debuginfo - update to 2.0.14-150000.3.31.1
libjasper4-32bit - update to 2.0.14-150000.3.31.1
libjasper4-32bit-debuginfo - update to 2.0.14-150000.3.31.1
jasper - update to 2.0.33-1
mingw-jasper - addressed in versions 3.0.6-5.fc38, 3.0.6-5.fc39
App Connect Enterprise Certified Container - addressed in versions 5.0.14, 11.2.0
Oracle Solaris - addressed in versions 11.3 ESU 36.33, 11.4 SRU 68

• https://github.com/jasper-software/jasper/issues/367
• https://github.com/jasper-software/jasper/releases/tag/version-4.1.2

• Remote code execution in Jasper
• Fedora 38 update for mingw-jasper
• Fedora 39 update for mingw-jasper
• SUSE update for jasper
• SUSE update for jasper
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository
• Oracle Solaris update for thrid-party components
• Amazon Linux AMI update for jasper