Lucene search
Veracode Vulnerability DatabaseVERACODE:17993HistoryMay 02, 2019 - 6:10 a.m.
Denial Of Service (DoS)
2019-05-0206:10:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.003 Low
EPSS
Percentile
70.0%
JasPer is vulnerable to denial of service(DoS) attacks. An attacker can exploit a flaw in the jpc_tsfb_synthesize function in jpc_tsfb.c. allowing an attacker to cause a null pointer dereference via vectors involving an empty sequence which leads the application to crash.
References
www.securityfocus.com/bid/93797
access.redhat.com/errata/RHSA-2017:1208
access.redhat.com/security/updates/classification/#important
blogs.gentoo.org/ago/2016/10/20/jasper-null-pointer-dereference-in-jpc_tsfb_synthesize-jpc_tsfb-c/
github.com/mdadams/jasper/commit/2e82fa00466ae525339754bb3ab0a0474a31d4bd
usn.ubuntu.com/3693-1/
Related
osv
osv
CVE-2016-10248
2017-03-15 14:59:00
ubuntucve
ubuntucve
CVE-2016-10248
2017-03-15 00:00:00
redhatcve
redhatcve
CVE-2016-10248
2017-03-21 14:22:54
nvd
nvd
CVE-2016-10248
2017-03-15 14:59:00
prion
prion
Null pointer dereference
2017-03-15 14:59:00
cvelist
cvelist
CVE-2016-10248
2017-03-15 14:00:00
cve
cve
CVE-2016-10248
2017-03-15 14:59:00
ubuntu
ubuntu
JasPer vulnerabilities
2018-06-27 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : JasPer vulnerabilities (USN-3693-1)
2018-06-28 00:00:00
RHEL 7 : netpbm (Unpatched Vulnerability)
2024-06-03 00:00:00
Oracle Linux 6 / 7 : jasper (ELSA-2017-1208)
2017-05-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3693-1)
2018-06-28 00:00:00
Huawei EulerOS: Security Advisory for jasper (EulerOS-SA-2017-1095)
2020-01-23 00:00:00
CentOS Update for jasper CESA-2017:1208 centos7
2017-05-16 00:00:00
cloudfoundry
cloudfoundry
USN-3693-1: JasPer vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
centos
centos
jasper security update
2017-05-15 15:59:23
amazon
amazon
Important: jasper
2017-06-06 16:49:00
ibm
ibm
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15