CVE-2016-9398: Reachable Assertion

The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9397: Reachable Assertion

The jpcdequantize function in jpcdec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9392: Undefined Security Weakness

The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

PT-2017-10113

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.13 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, via unspecified vectors. This is related to the jpc dequantize function in jpc dec.c. Recommendations For...

PT-2017-10115

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.22 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, via unspecified vectors. This is related to the calcstepsizes function in jpc dec.c. The estimated number of...

CVE-2016-9388: Reachable Assertion

The rasgetcmap function in rasdec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...

CVE-2016-9390: Improper Input Validation

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...

CVE-2016-9391: Undefined Security Weakness

The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large integer...

CVE-2016-9393: Undefined Security Weakness

The jpcpinextrpcl function in jpct2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

PT-2017-8762

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.1 through 4.1.2 before HF1 NetIQ Access Manager versions 4.2 through 4.2.2 Description The SAML2 implementation in Identity Server was handling unsigned SAML requests incorrectly. This incorrect handling could...

CVE-2016-9395: Improper Input Validation

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service assertion failure via a crafted file...

CVE-2016-9387: Integer Overflow or Wraparound

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

UBUNTU-CVE-2016-9389

The jpcirct and jpciict functions in jpcmct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service assertion failure...

PT-2017-10106

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.14 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, due to problems in the jpc irct and jpc iict functions. Recommendations For versions prior to...

PT-2017-10108

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.10 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a very large integer to the jpc bitstream getbits function in jpc bs.c. Recommendations...

CVE-2016-9394: Improper Input Validation

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

UBUNTU-CVE-2016-9396

The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors...

UBUNTU-CVE-2016-9391

The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large integer...

CVE-2016-5752: Exposure of Sensitive Information to an Unauthorized Actor

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester...