Lucene search
Veracode Vulnerability DatabaseVERACODE:17994HistoryMay 02, 2019 - 6:10 a.m.
Denial Of Service (DoS)
2019-05-0206:10:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.006 Low
EPSS
Percentile
77.7%
JasPer is vulnerable to denial of service(DoS) attacks. A user can exploit a flaw in the jpc_dec_tiledecode function in jpc_dec.c which allows a remote attacker to have unspecified impact via a crafted image file. This leads to heap-based-buffer overflow that may result in application crash.
References
www.debian.org/security/2017/dsa-3827
www.securityfocus.com/bid/93838
access.redhat.com/errata/RHSA-2017:1208
access.redhat.com/security/updates/classification/#important
blogs.gentoo.org/ago/2016/10/23/jasper-heap-based-buffer-overflow-in-jpc_dec_tiledecode-jpc_dec-c/
github.com/mdadams/jasper/commit/988f8365f7d8ad8073b6786e433d34c553ecf568
Related
prion
prion
Integer overflow
2017-03-15 14:59:00
cvelist
cvelist
CVE-2016-10249
2017-03-15 14:00:00
nvd
nvd
CVE-2016-10249
2017-03-15 14:59:00
ubuntucve
ubuntucve
osv
osv
CVE-2016-10249
2017-03-15 14:59:00
jasper - security update
2017-04-07 00:00:00
cve
cve
CVE-2016-10249
2017-03-15 14:59:00
redhatcve
redhatcve
CVE-2016-10249
2017-03-21 14:22:59
openvas
openvas
Debian: Security Advisory (DSA-3827-1)
2017-04-06 00:00:00
Debian Security Advisory DSA 3827-1 (jasper - security update)
2017-04-07 00:00:00
Debian: Security Advisory (DLA-739-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DSA 3827-1] jasper security update
2017-04-07 20:32:07
nessus
nessus
Debian DSA-3827-1 : jasper - security update
2017-04-10 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : JasPer vulnerabilities (USN-3295-1)
2017-05-19 00:00:00
Amazon Linux AMI : jasper (ALAS-2017-836)
2017-06-07 00:00:00
cloudfoundry
cloudfoundry
USN-3295-1: JasPer vulnerabilities | Cloud Foundry
2017-06-02 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2017-05-18 00:00:00
amazon
amazon
Important: jasper
2017-06-06 16:49:00
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
centos
centos
jasper security update
2017-05-15 15:59:23
ibm
ibm
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15