Lucene search
Veracode Vulnerability DatabaseVERACODE:18000HistoryMay 02, 2019 - 6:10 a.m.
Heap-based Buffer Overflow
2019-05-0206:10:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.002 Low
EPSS
Percentile
52.5%
jasper is vulnerable to heap-buffer overflow vulnerability. A remote attacker could exploit the flaw by allocating inadequate sizes to the buffer, causing denial of service. The affected component is JPC Codec.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jasper | eq | 1.900.1__15.el6_1.1 | |
| jasper | eq | 1.900.1__16.el6_6.3 | |
| jasper | eq | 1.900.1__15.el6 | |
| jasper | eq | 1.900.1__29.el7 | |
| jasper | eq | 1.900.1__16.el6_6.2 |
References
www.securityfocus.com/bid/94583
access.redhat.com/errata/RHSA-2017:1208
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8654
github.com/mdadams/jasper/commit/4a59cfaf9ab3d48fca4a15c0d2674bf7138e3d1a
github.com/mdadams/jasper/issues/93
github.com/mdadams/jasper/issues/94
www.debian.org/security/2017/dsa-3785
Related
prion
prion
Heap overflow
2018-08-01 16:29:00
osv
osv
CVE-2016-8654
2018-08-01 16:29:00
jasper - security update
2017-02-09 00:00:00
jasper - security update
2016-12-10 00:00:00
cve
cve
CVE-2016-8654
2018-08-01 16:29:00
nvd
nvd
CVE-2016-8654
2018-08-01 16:29:00
cvelist
cvelist
CVE-2016-8654
2018-08-01 16:00:00
ubuntucve
ubuntucve
CVE-2016-8654
2016-11-30 00:00:00
redhatcve
redhatcve
CVE-2016-8654
2016-11-28 13:47:25
openvas
openvas
Fedora Update for jasper FEDORA-2017-c1bec8972c
2017-03-21 00:00:00
Fedora Update for jasper FEDORA-2017-3dba8a70ce
2017-03-16 00:00:00
openSUSE: Security Advisory for jasper (openSUSE-SU-2017:0101-1)
2017-01-11 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: jasper-1.900.13-3.fc25
2017-03-15 18:26:46
[SECURITY] Fedora 24 Update: jasper-1.900.13-3.fc24
2017-03-21 02:51:48
nessus
nessus
Fedora 25 : jasper (2017-3dba8a70ce)
2017-03-16 00:00:00
Fedora 24 : jasper (2017-c1bec8972c)
2017-03-22 00:00:00
SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0084-1)
2017-01-10 00:00:00
suse
suse
Security update for jasper (important)
2017-01-10 19:08:10
Security update for jasper (important)
2017-01-08 17:07:30
Security update for jasper (important)
2017-04-05 21:08:41
debian
debian
[SECURITY] [DSA 3785-1] jasper security update
2017-02-09 22:29:07
[SECURITY] [DLA 739-1] jasper security updat
2016-12-10 17:17:01
cloudfoundry
cloudfoundry
USN-3295-1: JasPer vulnerabilities | Cloud Foundry
2017-06-02 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2017-05-18 00:00:00
amazon
amazon
Important: jasper
2017-06-06 16:49:00
ibm
ibm
centos
centos
jasper security update
2017-05-15 15:59:23
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15