CVE:CVE-2021-3443
CNNVD:CNNVD-202103-1379
JasPer是Michael Adams个人开发者的一个基于C的用于处理图像的工具。该软件支持ISO / IEC 15444-1中定义的JPEG-2000格式，主要用于图像的编码和处理。
Jasper 存在代码问题漏洞，攻击者可利用该漏洞可以通过jp2_decode()强制空指针被解引用，从而触发拒绝服务。
solution:Upgrade jasper_project jasper to a higher version than 2.0.27,and avoid the version (,2.0.27); Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33