Lucene search
Veracode Vulnerability DatabaseVERACODE:13699HistoryApr 29, 2019 - 1:42 a.m.
Denial Of Service (DoS)
2019-04-2901:42:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.006 Low
EPSS
Percentile
79.1%
libjasper.so is vulnerable to denial of service. A stack-based buffer overflow in jpc_dec_tileinit() allows an attacker to crash the process or potentially retrieve confidential information from the process memory or execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libjasper.so | eq | 1.0.0 | |
| jasper | eq | 1.900.1__15.el6_1.1 | |
| jasper | eq | 1.900.1__16.el6_6.3 | |
| jasper | eq | 1.900.1__15.el6 | |
| jasper | eq | 1.900.1__29.el7 | |
| jasper | eq | 1.900.1__16.el6_6.2 |
References
www.debian.org/security/2017/dsa-3785
www.openwall.com/lists/oss-security/2016/11/20/1
www.openwall.com/lists/oss-security/2016/11/23/5
www.securityfocus.com/bid/94428
access.redhat.com/errata/RHSA-2017:1208
blogs.gentoo.org/ago/2016/11/20/jasper-stack-based-buffer-overflow-in-jpc_tsfb_getbands2-jpc_tsfb-c/
github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-9560
github.com/mdadams/jasper/commit/1abc2e5a401a4bf1d5ca4df91358ce5df111f495
Related
cvelist
cvelist
CVE-2016-9560
2017-02-15 19:00:00
prion
prion
Stack overflow
2017-02-15 19:59:00
cve
cve
CVE-2016-9560
2017-02-15 19:59:01
redhatcve
redhatcve
CVE-2016-9560
2016-11-24 11:17:47
nvd
nvd
CVE-2016-9560
2017-02-15 19:59:01
osv
osv
CVE-2016-9560
2017-02-15 19:59:01
jasper - security update
2017-02-09 00:00:00
jasper - security update
2016-12-10 00:00:00
ubuntucve
ubuntucve
CVE-2016-9560
2017-02-15 00:00:00
nessus
nessus
openSUSE Security Update : jasper (openSUSE-2017-70)
2017-01-11 00:00:00
SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0084-1)
2017-01-10 00:00:00
Debian DSA-3785-1 : jasper - security update
2017-02-10 00:00:00
suse
suse
Security update for jasper (important)
2017-01-10 19:08:10
Security update for jasper (important)
2017-01-08 17:07:30
Security update for jasper (important)
2017-04-05 21:08:41
openvas
openvas
openSUSE: Security Advisory for jasper (openSUSE-SU-2017:0101-1)
2017-01-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:0084-1)
2021-04-19 00:00:00
Debian: Security Advisory (DSA-3785-1)
2017-02-08 00:00:00
debian
debian
[SECURITY] [DSA 3785-1] jasper security update
2017-02-09 22:29:07
[SECURITY] [DLA 739-1] jasper security updat
2016-12-10 17:17:01
cloudfoundry
cloudfoundry
USN-3295-1: JasPer vulnerabilities | Cloud Foundry
2017-06-02 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2017-05-18 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: jasper-1.900.13-4.fc25
2017-05-17 06:06:15
[SECURITY] Fedora 24 Update: jasper-1.900.13-4.fc24
2017-05-18 21:01:18
archlinux
archlinux
[ASA-201612-9] jasper: multiple issues
2016-12-07 00:00:00
centos
centos
jasper security update
2017-05-15 15:59:23
amazon
amazon
Important: jasper
2017-06-06 16:49:00
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
ibm
ibm
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15