Lucene search
Veracode Vulnerability DatabaseVERACODE:7579HistoryOct 09, 2018 - 5:19 a.m.
Denial Of Service (DoS)
2018-10-0905:19:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.007 Low
EPSS
Percentile
80.7%
libjasper.so is vulnerable to denial of service. A NULL pointer dereference in the bmp_getdata function in libjasper/bmp/bmp_dec.c allows remote attackers to cause a denial of service condition by calling the imginfo command with a crafted BMP image. This vulnerability exists due to an incomplete fix for CVE-2016-8690.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libjasper.so | eq | 1.0.0 | |
| jasper | eq | 1.900.1__29.el7 | |
| jasper | eq | 1.900.1__15.el6_1.1 | |
| jasper | eq | 1.900.1__16.el6_6.2 | |
| jasper | eq | 1.900.1__16.el6_6.3 | |
| jasper | eq | 1.900.1__15.el6 |
Related
cvelist
cvelist
CVE-2016-8884
2017-03-28 14:00:00
CVE-2016-8690
2017-02-15 19:00:00
nvd
nvd
CVE-2016-8884
2017-03-28 14:59:00
CVE-2016-8690
2017-02-15 19:59:00
prion
prion
Null pointer dereference
2017-03-28 14:59:00
Null pointer dereference
2017-02-15 19:59:00
cve
cve
CVE-2016-8884
2017-03-28 14:59:00
CVE-2016-8690
2017-02-15 19:59:00
osv
osv
redhatcve
redhatcve
ubuntucve
ubuntucve
veracode
veracode
NULL Pointer Dereference
2019-05-02 06:10:45
debian
debian
[SECURITY] [DLA 1583-1] jasper security update
2018-11-21 14:17:07
nessus
nessus
Debian DLA-1583-1 : jasper security update
2018-11-23 00:00:00
Fedora 25 : jasper (2016-81f9c6f0ae)
2016-11-15 00:00:00
Fedora 23 : jasper (2016-6c789ba91d)
2016-11-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1583-1)
2018-11-20 00:00:00
Fedora Update for jasper FEDORA-2016-81f9c6f0ae
2016-12-07 00:00:00
Fedora Update for jasper FEDORA-2016-e0f0d48142
2016-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: jasper-1.900.13-1.fc25
2016-10-28 00:48:54
[SECURITY] Fedora 24 Update: jasper-1.900.13-1.fc24
2016-11-10 03:31:54
[SECURITY] Fedora 23 Update: jasper-1.900.13-1.fc23
2016-11-10 15:53:31
archlinux
archlinux
[ASA-201612-9] jasper: multiple issues
2016-12-07 00:00:00
amazon
amazon
Important: jasper
2017-06-06 16:49:00
centos
centos
jasper security update
2017-05-15 15:59:23
ibm
ibm
redhat
redhat
(RHSA-2017:1208) Important: jasper security update
2017-05-09 14:59:57
oraclelinux
oraclelinux
jasper security update
2017-05-09 00:00:00
mageia
mageia
Updated jasper packages fix security vulnerabilities
2017-12-31 03:10:15