Remote Denial of Service Vulnerability in JasPer 2.0.12: Memory Leaks in jas_strdup() Function

CVE-2017-13748 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.

Learn more about our Web Application Penetration Testing UK.