Lucene search
Veracode Vulnerability DatabaseVERACODE:18006HistoryMay 02, 2019 - 6:10 a.m.
Integer Overflow
2019-05-0206:10:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.008 Low
EPSS
Percentile
82.0%
JasPer is vulnerable to integer overflows. A remote attacker could cause denial of service via a crafted image triggering use after free vulnerabilities. Affected by this issue is the function jas_realloc/mem_resize of the file base/jas_malloc.c.
References
www.openwall.com/lists/oss-security/2016/11/10/4
www.securityfocus.com/bid/94224
access.redhat.com/errata/RHSA-2017:1208
access.redhat.com/security/updates/classification/#important
blogs.gentoo.org/ago/2016/11/07/jasper-use-after-free-in-jas_realloc-jas_malloc-c
bugzilla.redhat.com/show_bug.cgi?id=1393882
github.com/mdadams/jasper/commit/634ce8e8a5accc0fa05dd2c20d42b4749d4b2735
security.gentoo.org/glsa/201707-07
usn.ubuntu.com/3693-1/
Related
prion
prion
Integer overflow
2017-03-23 18:59:00
redhatcve
redhatcve
CVE-2016-9262
2016-11-10 14:47:21
cve
cve
CVE-2016-9262
2017-03-23 18:59:00
nvd
nvd
CVE-2016-9262
2017-03-23 18:59:00
ubuntucve
ubuntucve
CVE-2016-9262
2017-03-23 00:00:00
cvelist
cvelist
CVE-2016-9262
2017-03-23 18:00:00
osv
osv
CVE-2016-9262
2017-03-23 18:59:00
nessus
nessus
Fedora 25 : jasper (2017-3dba8a70ce)
2017-03-16 00:00:00
Fedora 24 : jasper (2017-c1bec8972c)
2017-03-22 00:00:00
GLSA-201707-07 : JasPer: Multiple vulnerabilities
2017-07-10 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: jasper-1.900.13-3.fc24
2017-03-21 02:51:48
[SECURITY] Fedora 25 Update: jasper-1.900.13-3.fc25
2017-03-15 18:26:46
openvas
openvas
Fedora Update for jasper FEDORA-2017-3dba8a70ce
2017-03-16 00:00:00
Fedora Update for jasper FEDORA-2017-c1bec8972c
2017-03-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1916-1)
2021-04-19 00:00:00
gentoo
gentoo
JasPer: Multiple vulnerabilities
2017-07-08 00:00:00
archlinux
archlinux
[ASA-201612-9] jasper: multiple issues
2016-12-07 00:00:00
cloudfoundry
cloudfoundry
USN-3693-1: JasPer vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2018-06-27 00:00:00
amazon
amazon
Important: jasper
2017-06-06 16:49:00
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
ibm
ibm
centos
centos
jasper security update
2017-05-15 15:59:23
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15