Lucene search
Veracode Vulnerability DatabaseVERACODE:7222HistoryAug 02, 2018 - 6:37 a.m.
Out-of-Bounds Heap Read Through Integer Overflow
2018-08-0206:37:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.002 Low
EPSS
Percentile
52.0%
libjasper.so is vulnerable to out-of-bounds heap read attacks. The vulnerability exists due to multiple integer overflow issues when handling packet iterators, allowing out-of-bounds heap read to occur.
References
www.securityfocus.com/bid/94925
access.redhat.com/errata/RHSA-2017:1208
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9583
github.com/mdadams/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d
github.com/mdadams/jasper/commit/f25486c3d4aa472fec79150f2c41ed4333395d3d
github.com/mdadams/jasper/compare/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d...f25486c3d4aa472fec79150f2c41ed4333395d3d
www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
Related
osv
osv
CVE-2016-9583
2018-08-01 17:29:00
openvas
openvas
Fedora Update for jasper FEDORA-2017-78a77d2450
2017-02-03 00:00:00
Fedora Update for jasper FEDORA-2017-d90fac5c8f
2017-02-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:0953-1)
2021-04-19 00:00:00
prion
prion
Heap overflow
2018-08-01 17:29:00
nvd
nvd
CVE-2016-9583
2018-08-01 17:29:00
fedora
fedora
[SECURITY] Fedora 25 Update: jasper-1.900.13-2.fc25
2017-02-01 21:21:36
[SECURITY] Fedora 24 Update: jasper-1.900.13-2.fc24
2017-02-03 21:50:06
cvelist
cvelist
CVE-2016-9583
2018-08-01 17:00:00
redhatcve
redhatcve
CVE-2016-9583
2016-12-15 19:10:59
ubuntucve
ubuntucve
CVE-2016-9583
2018-08-01 00:00:00
nessus
nessus
Fedora 25 : jasper (2017-78a77d2450)
2017-02-02 00:00:00
Fedora 24 : jasper (2017-d90fac5c8f)
2017-02-06 00:00:00
SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0953-1)
2017-04-07 00:00:00
cve
cve
CVE-2016-9583
2018-08-01 17:29:00
suse
suse
Security update for jasper (important)
2017-04-05 21:08:41
amazon
amazon
Important: jasper
2017-06-06 16:49:00
centos
centos
jasper security update
2017-05-15 15:59:23
ibm
ibm
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00