CVE-2018-9252

A vulnerability was found in Jasper due to a flaw in the jpc_abstorelstepsize function within libjasper/jpc/jpc_enc.c, where an attacker can cause a denial of service, leading to the application crashing when triggered by specially crafted input.

This vulnerability is rated as a moderate because it allows denial of service due to a reachable assertion in the jpc_abstorelstepsize function within libjasper/jpc/jpc_enc.c. Processing specially crafted input may trigger this issue, causing an application crash and affecting availability, it does not lead to code execution.

The following products are now in Extended Life Phase of the support and maintenance life cycle.

• Red Hat Enterprise Linux 5
• Red Hat Enterprise Virtualization 3 The following products are now in Maintenance Phase 2 of the support and maintenance life cycle.
• Red Hat Enterprise Linux 6 This issue is not currently planned to be addressed in future updates of these products. For additional information, please refer to the Life Cycle and Update Policies: https://access.redhat.com/support/policy/update_policies/

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.