Lucene search
PRIOn knowledge basePRION:CVE-2016-9262HistoryMar 23, 2017 - 6:59 p.m.
Integer overflow
2017-03-2318:59:00
PRIOn knowledge base
www.prio-n.com
2
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
References
www.openwall.com/lists/oss-security/2016/11/10/4
www.securityfocus.com/bid/94224
access.redhat.com/errata/RHSA-2017:1208
blogs.gentoo.org/ago/2016/11/07/jasper-use-after-free-in-jas_realloc-jas_malloc-c
bugzilla.redhat.com/show_bug.cgi?id=1393882
github.com/mdadams/jasper/commit/634ce8e8a5accc0fa05dd2c20d42b4749d4b2735
security.gentoo.org/glsa/201707-07
usn.ubuntu.com/3693-1/
Related
veracode
veracode
Integer Overflow
2019-05-02 06:10:46
redhatcve
redhatcve
CVE-2016-9262
2016-11-10 14:47:21
cve
cve
CVE-2016-9262
2017-03-23 18:59:00
nvd
nvd
CVE-2016-9262
2017-03-23 18:59:00
ubuntucve
ubuntucve
CVE-2016-9262
2017-03-23 00:00:00
cvelist
cvelist
CVE-2016-9262
2017-03-23 18:00:00
osv
osv
CVE-2016-9262
2017-03-23 18:59:00
nessus
nessus
Fedora 25 : jasper (2017-3dba8a70ce)
2017-03-16 00:00:00
Fedora 24 : jasper (2017-c1bec8972c)
2017-03-22 00:00:00
GLSA-201707-07 : JasPer: Multiple vulnerabilities
2017-07-10 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: jasper-1.900.13-3.fc24
2017-03-21 02:51:48
[SECURITY] Fedora 25 Update: jasper-1.900.13-3.fc25
2017-03-15 18:26:46
openvas
openvas
Fedora Update for jasper FEDORA-2017-3dba8a70ce
2017-03-16 00:00:00
Fedora Update for jasper FEDORA-2017-c1bec8972c
2017-03-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1916-1)
2021-04-19 00:00:00
gentoo
gentoo
JasPer: Multiple vulnerabilities
2017-07-08 00:00:00
archlinux
archlinux
[ASA-201612-9] jasper: multiple issues
2016-12-07 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2018-06-27 00:00:00
cloudfoundry
cloudfoundry
USN-3693-1: JasPer vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
amazon
amazon
Important: jasper
2017-06-06 16:49:00
centos
centos
jasper security update
2017-05-15 15:59:23
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
ibm
ibm
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15