Lucene search
Veracode Vulnerability DatabaseVERACODE:6760HistoryJun 08, 2018 - 1:44 p.m.
Denial Of Service (DoS)
2018-06-0813:44:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.014 Low
EPSS
Percentile
86.5%
libjasper.so is vulnerable to denial of service (DoS) attacks. A malicious user can pass a jpc file to the jpc_dequantize function in jpc_dec.c to cause an assertion failure that can crash the application. This issue was also given CVE-2016-9397.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libjasper.so | eq | 1.0.0 |
References
www.securityfocus.com/bid/100514
bugzilla.redhat.com/show_bug.cgi?id=1485276
github.com/mdadams/jasper/issues/56
lists.fedoraproject.org/archives/list/[email protected]/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
lists.fedoraproject.org/archives/list/[email protected]/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/
nvd.nist.gov/vuln/detail/CVE-2016-9397
security.gentoo.org/glsa/201908-03
Related
nvd
nvd
CVE-2016-9397
2017-03-23 18:59:00
CVE-2017-13752
2017-08-29 06:29:01
prion
prion
Design/Logic Flaw
2017-03-23 18:59:00
Authentication flaw
2017-08-29 06:29:00
redhatcve
redhatcve
CVE-2016-9397
2016-11-21 10:47:43
CVE-2017-13752
2017-09-06 14:19:14
ubuntucve
ubuntucve
CVE-2016-9397
2017-03-23 00:00:00
CVE-2017-13752
2017-08-29 00:00:00
cvelist
cvelist
CVE-2017-13752
2017-08-29 06:00:00
CVE-2016-9397
2017-03-23 18:00:00
osv
osv
CVE-2017-13752
2017-08-29 06:29:01
CVE-2016-9397
2017-03-23 18:59:00
cve
cve
CVE-2016-9397
2017-03-23 18:59:00
CVE-2017-13752
2017-08-29 06:29:01
fedora
fedora
[SECURITY] Fedora 33 Update: jasper-2.0.24-1.fc33
2021-01-31 01:28:41
[SECURITY] Fedora 32 Update: jasper-2.0.24-1.fc32
2021-02-03 01:18:35
openvas
openvas
Huawei EulerOS: Security Advisory for jasper (EulerOS-SA-2020-1188)
2020-03-13 00:00:00
Fedora: Security Advisory for jasper (FEDORA-2021-2b151590d9)
2021-02-01 00:00:00
Fedora: Security Advisory for jasper (FEDORA-2021-0a6290f865)
2021-02-04 00:00:00
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.2.0 : jasper (EulerOS-SA-2020-1188)
2020-03-13 00:00:00
RHEL 5 : jasper (Unpatched Vulnerability)
2024-06-03 00:00:00
Fedora 32 : jasper (2021-0a6290f865)
2021-02-04 00:00:00
gentoo
gentoo
JasPer: Multiple vulnerabilities
2019-08-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15