Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2011-029
HistoryDec 12, 2011 - 1:45 p.m.

Important: jasper

2011-12-1213:45:00
alas.aws.amazon.com
16

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.123 Low

EPSS

Percentile

95.4%

JSON

Issue Overview:

Two heap-based buffer overflow flaws were found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer (such as Nautilus) to crash or, potentially, execute arbitrary code.

Affected Packages:

jasper

Issue Correction:
Run yum update jasper to update your system.

New Packages:

i686:  
    jasper-debuginfo-1.900.1-15.5.amzn1.i686  
    jasper-devel-1.900.1-15.5.amzn1.i686  
    jasper-libs-1.900.1-15.5.amzn1.i686  
    jasper-1.900.1-15.5.amzn1.i686  
    jasper-utils-1.900.1-15.5.amzn1.i686  
  
src:  
    jasper-1.900.1-15.5.amzn1.src  
  
x86_64:  
    jasper-1.900.1-15.5.amzn1.x86_64  
    jasper-utils-1.900.1-15.5.amzn1.x86_64  
    jasper-debuginfo-1.900.1-15.5.amzn1.x86_64  
    jasper-devel-1.900.1-15.5.amzn1.x86_64  
    jasper-libs-1.900.1-15.5.amzn1.x86_64

Additional References

Red Hat: CVE-2011-4516

Mitre: CVE-2011-4516

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686jasper-debuginfo< 1.900.1-15.5.amzn1jasper-debuginfo-1.900.1-15.5.amzn1.i686.rpm
Amazon Linux1i686jasper-devel< 1.900.1-15.5.amzn1jasper-devel-1.900.1-15.5.amzn1.i686.rpm
Amazon Linux1i686jasper-libs< 1.900.1-15.5.amzn1jasper-libs-1.900.1-15.5.amzn1.i686.rpm
Amazon Linux1i686jasper< 1.900.1-15.5.amzn1jasper-1.900.1-15.5.amzn1.i686.rpm
Amazon Linux1i686jasper-utils< 1.900.1-15.5.amzn1jasper-utils-1.900.1-15.5.amzn1.i686.rpm
Amazon Linux1x86_64jasper< 1.900.1-15.5.amzn1jasper-1.900.1-15.5.amzn1.x86_64.rpm
Amazon Linux1x86_64jasper-utils< 1.900.1-15.5.amzn1jasper-utils-1.900.1-15.5.amzn1.x86_64.rpm
Amazon Linux1x86_64jasper-debuginfo< 1.900.1-15.5.amzn1jasper-debuginfo-1.900.1-15.5.amzn1.x86_64.rpm
Amazon Linux1x86_64jasper-devel< 1.900.1-15.5.amzn1jasper-devel-1.900.1-15.5.amzn1.x86_64.rpm
Amazon Linux1x86_64jasper-libs< 1.900.1-15.5.amzn1jasper-libs-1.900.1-15.5.amzn1.x86_64.rpm

Related

ubuntucve 1
openvas 34
debiancve 1
checkpoint_advisories 2
nessus 30
prion 2
cve 2
suse 3
fedora 5
redhat 3
oraclelinux 2
securityvulns 2
ubuntu 2
cert 1
gentoo 1
redhatcve 1
debian 1
centos 2
veracode 2
freebsd 1
archlinux 1
slackware 1
oracle 1
ubuntucve
ubuntucve
CVE-2011-4516
2011-12-14 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2011-29)
2015-09-08 00:00:00
Debian: Security Advisory (DSA-2371-1)
2023-03-08 00:00:00
Oracle: Security Advisory (ELSA-2011-1807)
2015-10-06 00:00:00
debiancve
debiancve
CVE-2011-4516
2011-12-15 03:57:00
checkpoint_advisories
checkpoint_advisories
Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-08-27 00:00:00
Oracle Outside In JPEG 2000 Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-12-13 00:00:00
nessus
nessus
Amazon Linux AMI : jasper (ALAS-2011-29)
2013-09-04 00:00:00
Fedora 16 : jasper-1.900.1-18.fc16 (2011-16966)
2012-01-03 00:00:00
openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)
2014-06-13 00:00:00
prion
prion
Heap overflow
2011-12-15 03:57:00
Design/Logic Flaw
2017-01-13 16:59:00
cve
cve
CVE-2011-4516
2011-12-15 03:57:00
CVE-2016-8880
2017-01-13 16:59:00
suse
suse
Security update for jasper (important)
2011-12-12 02:08:33
Security update for jasper (important)
2011-12-14 19:08:30
jasper (important)
2011-12-16 13:08:23
fedora
fedora
[SECURITY] Fedora 15 Update: jasper-1.900.1-18.fc15
2012-01-02 21:52:41
[SECURITY] Fedora 16 Update: jasper-1.900.1-18.fc16
2011-12-30 22:53:37
[SECURITY] Fedora 21 Update: mingw-jasper-1.900.1-24.fc21
2014-12-17 04:47:06
redhat
redhat
(RHSA-2011:1807) Important: jasper security update
2011-12-09 00:00:00
(RHSA-2011:1811) Important: netpbm security update
2011-12-12 00:00:00
(RHSA-2015:0698) Important: rhevm-spice-client security, bug fix, and enhancement update
2015-03-18 00:00:00
oraclelinux
oraclelinux
jasper security update
2011-12-14 00:00:00
netpbm security update
2011-12-12 00:00:00
securityvulns
securityvulns
JasPer library security vulnerabilities
2011-12-19 00:00:00
Oracle / Sun / People Soft / MySQL applications multiple security vulnerabilities
2012-03-10 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2011-12-20 00:00:00
Ghostscript vulnerabilities
2012-01-04 00:00:00
cert
cert
JasPer memory corruption vulnerabilities
2011-12-08 00:00:00
gentoo
gentoo
JasPer: User-assisted execution of arbitrary code
2012-01-23 00:00:00
redhatcve
redhatcve
CVE-2016-8880
2016-10-26 10:47:53
debian
debian
[SECURITY] [DSA 2371-1] jasper security update
2011-12-24 16:06:08
centos
centos
jasper security update
2011-12-22 15:46:17
netpbm security update
2011-12-12 22:16:22
veracode
veracode
Memory Corruption
2019-05-02 04:40:58
Denial Of Service (DoS) Or Remote Code Execution (RCE)
2019-05-02 04:40:58
freebsd
freebsd
jasper -- buffer overflow
2011-12-09 00:00:00
archlinux
archlinux
jasper: arbitrary code execution
2014-12-19 00:00:00
slackware
slackware
[slackware-security] jasper
2015-10-29 22:48:48
oracle
oracle
Oracle Critical Patch Update - January 2012
2012-01-17 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.123 Low

EPSS

Percentile

95.4%

JSON
Related for ALAS-2011-029
ubuntucve1openvas34debiancve1checkpoint_advisories2nessus30prion2cve2suse3fedora5redhat3oraclelinux2securityvulns2ubuntu2cert1gentoo1redhatcve1debian1centos2veracode2freebsd1archlinux1slackware1oracle1