PT-2017-16542

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving left shift of a negative value in the libjasper/jp2/jp2 dec.c file...

CVE-2017-5501: Integer Overflow or Wraparound

Integer overflow in libjasper/jpc/jpctsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-5499: Integer Overflow or Wraparound

Integer overflow in libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

PT-2017-16541

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue is caused by an integer overflow in the libjasper/jpc/jpc tsfb.c file, which allows remote attackers to cause a denial of service crash via a crafted file. Recommendations For JasPer version...

CVE-2017-5503: Out-of-bounds Write

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...

CVE-2017-5504: Out-of-bounds Read

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

PT-2017-16538

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving the left shift of a negative value in the libjasper/include/jasper/jas math.h...

PT-2017-16544

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.27 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash, via a crafted image. This is due to a problem in the jpc undo roi function. Recommendations For...

CVE-2017-5498: Undefined Security Weakness

libjasper/include/jasper/jasmath.h in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

PT-2017-16540

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving the left shift of a negative value in the libjasper/jpc/jpc dec.c file...

PT-2017-16539

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue is caused by an integer overflow in the libjasper/jpc/jpc dec.c file, which allows remote attackers to cause a denial of service crash via a crafted file. Recommendations For JasPer version 1.900.1...

Fedora Update for jasper FEDORA-2017-d90fac5c8f

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-9560

Stack-based buffer overflow in the jpctsfbgetbands2 function in jpctsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image...

CVE-2016-9560

Stack-based buffer overflow in the jpctsfbgetbands2 function in jpctsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image...

Command injection

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...

Stack overflow

Stack-based buffer overflow in the jpctsfbgetbands2 function in jpctsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image...

Command injection

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

Double free

Double free vulnerability in the memclose function in jasstream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image to the imginfo command...

CVE-2016-8693

Double free vulnerability in the memclose function in jasstream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image to the imginfo command...

Null pointer dereference

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted BMP image in an imginfo command...