CVE-2017-13745 is a denial-of-service vulnerability affecting JasPer 2.0.12, specifically within the jpc_dec_process_sot() function in jpc/jpc_dec.c. This flaw allows a remote attacker to trigger an assertion abort by manipulating the jpc_ppmstabtostreams return value. Rated 7.5 High on the CVSS scale, it requires no user interaction or authentication, making it easily exploitable with a high impact on availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.12CPE matchmatch criteria | cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.