The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765378381 advisory.

  - An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to     execute arbitrary code. (CVE-2023-51257)

  - A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2     of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to     reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the     public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is     recommended to apply a patch to fix this issue. (CVE-2025-8836)

  - A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file     src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after     free. An attack has to be approached locally. The exploit has been disclosed to the public and may be     used. The patch is named 8308060d3fbc1da10353ac8a95c8ea60eba9c25a. It is recommended to apply a patch to     fix this issue. (CVE-2025-8837)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9.6 [TuxCare] Security Update: jasper / jasper-devel / jasper-libs / jasper-utils Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1765378381)

medium Nessus Plugin ID 351622

Version 1.2