Lucene search

K
redhatcveRedhat.comRH:CVE-2016-8884
HistoryNov 30, 2016 - 10:17 p.m.

CVE-2016-8884

2016-11-3022:17:51
redhat.com
access.redhat.com
11

0.01 Low

EPSS

Percentile

83.5%

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.