Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3693-1
HistoryJun 27, 2018 - 12:00 a.m.

JasPer vulnerabilities

2018-06-2700:00:00
ubuntu.com
47

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON

Releases

  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • jasper - Library for manipulating JPEG-2000 files

Details

It was discovered that JasPer incorrectly handled certain malformed
JPEG-2000 image files. If a user or automated system using JasPer were
tricked into opening a specially crafted image, an attacker could exploit
this to cause a denial of service or possibly execute code with the
privileges of the user invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibjasper1< 1.900.1-debian1-2.4ubuntu1.2UNKNOWN
Ubuntu16.04noarchlibjasper-dev< 1.900.1-debian1-2.4ubuntu1.2UNKNOWN
Ubuntu16.04noarchlibjasper-runtime< 1.900.1-debian1-2.4ubuntu1.2UNKNOWN
Ubuntu16.04noarchlibjasper-runtime-dbgsym< 1.900.1-debian1-2.4ubuntu1.2UNKNOWN
Ubuntu16.04noarchlibjasper1-dbgsym< 1.900.1-debian1-2.4ubuntu1.2UNKNOWN
Ubuntu14.04noarchlibjasper1< 1.900.1-14ubuntu3.5UNKNOWN
Ubuntu14.04noarchlibjasper-dev< 1.900.1-14ubuntu3.5UNKNOWN
Ubuntu14.04noarchlibjasper-runtime< 1.900.1-14ubuntu3.5UNKNOWN
Ubuntu14.04noarchlibjasper-runtime-dbgsym< 1.900.1-14ubuntu3.5UNKNOWN
Ubuntu14.04noarchlibjasper1-dbgsym< 1.900.1-14ubuntu3.5UNKNOWN

Related

nessus 40
openvas 26
cloudfoundry 1
fedora 7
redhatcve 14
centos 2
amazon 2
nvd 14
osv 13
mageia 2
ubuntucve 13
ibm 3
cvelist 16
cve 14
prion 15
oraclelinux 2
redhat 2
freebsd 1
archlinux 1
gentoo 1
alpinelinux 1
veracode 9
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : JasPer vulnerabilities (USN-3693-1)
2018-06-28 00:00:00
SUSE SLES11 Security Update : jasper (SUSE-SU-2017:1901-1)
2017-07-20 00:00:00
SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:1916-1)
2017-07-21 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3693-1)
2018-06-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1916-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0339-1)
2021-04-19 00:00:00
cloudfoundry
cloudfoundry
USN-3693-1: JasPer vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: jasper-2.0.14-5.fc27
2018-06-02 21:14:04
[SECURITY] Fedora 28 Update: jasper-2.0.14-5.fc28
2018-06-04 13:17:36
[SECURITY] Fedora 25 Update: jasper-1.900.13-4.fc25
2017-05-17 06:06:15
redhatcve
redhatcve
CVE-2016-9393
2016-11-21 10:18:16
CVE-2016-9392
2016-11-21 10:18:22
CVE-2016-9394
2016-11-21 10:17:47
centos
centos
jasper security update
2017-05-15 15:59:23
jasper security update
2018-11-15 18:47:22
amazon
amazon
Important: jasper
2017-06-06 16:49:00
Low: jasper
2019-01-23 23:21:00
nvd
nvd
CVE-2016-10250
2017-03-15 14:59:00
CVE-2016-8887
2017-03-23 18:59:00
CVE-2017-6850
2017-03-15 14:59:01
osv
osv
CVE-2016-10250
2017-03-15 14:59:00
CVE-2016-10248
2017-03-15 14:59:00
CVE-2017-6850
2017-03-15 14:59:01
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15
Updated jasper packages fix security vulnerability
2016-09-16 12:27:13
ubuntucve
ubuntucve
CVE-2016-10250
2017-03-15 00:00:00
CVE-2016-9393
2017-03-23 00:00:00
CVE-2016-9394
2017-03-23 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in JasPer affect PowerKVM
2018-06-18 01:36:15
Security Bulletin: Vulnerabilities in JasPer affect PowerKVM
2018-12-17 14:25:02
Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry
2020-07-19 00:49:12
cvelist
cvelist
CVE-2016-10250
2017-03-15 14:00:00
CVE-2017-6850
2017-03-15 14:00:00
CVE-2016-9600
2017-01-04 00:00:00
cve
cve
CVE-2016-10250
2017-03-15 14:59:00
CVE-2017-6850
2017-03-15 14:59:01
CVE-2016-9392
2017-03-23 18:59:00
prion
prion
Null pointer dereference
2017-03-15 14:59:00
Null pointer dereference
2017-03-23 18:59:00
Null pointer dereference
2017-03-15 14:59:00
oraclelinux
oraclelinux
jasper security update
2018-11-05 00:00:00
jasper security update
2017-05-09 00:00:00
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
(RHSA-2018:3253) Low: jasper security update
2018-10-30 04:34:55
freebsd
freebsd
jasper -- multiple vulnerabilities
2015-08-17 00:00:00
archlinux
archlinux
[ASA-201612-9] jasper: multiple issues
2016-12-07 00:00:00
gentoo
gentoo
JasPer: Multiple vulnerabilities
2017-07-08 00:00:00
alpinelinux
alpinelinux
CVE-2017-1000050
2017-07-17 13:18:17
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:10:44
Denial Of Service (DoS)
2019-05-02 06:10:47
Denial Of Service (DoS)
2019-04-29 02:37:52

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON
Related for USN-3693-1
nessus40openvas26cloudfoundry1fedora7redhatcve14centos2amazon2nvd14osv13mageia2ubuntucve13ibm3cvelist16cve14prion15oraclelinux2redhat2freebsd1archlinux1gentoo1alpinelinux1veracode9