CVE:CVE-2015-5221
CNNVD:CNNVD-201707-1237
JasPer JPEG-2000 library是加拿大软件开发者Michael Adams所研发的一个开源的JPEG-2000编码库。
JasPer JPEG-2000 library 1.900.2之前的版本中的libjasper/mif/mif_cod.c文件的‘mif_process_cmpt’函数存在释放后重用漏洞。远程攻击者可借助特制的JPEG 2000图像文件利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade fedoraproject fedora to a higher version than 23,24,25,and avoid the version 23,24,25; Upgrade opensuse leap to a higher version than 42.2,and avoid the version 42.2; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade opensuse_project leap to a higher version than 42.1,and avoid the version 42.1; Upgrade jasper_project jasper to a higher version than 1.900.1,and avoid the version (,1.900.1]