Lucene search
+L

2824 matches found

Mend
Mend
•added 2017/02/15 7:00 p.m.•3 views

CVE-2016-8690

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted BMP image in an imginfo command...

6.8CVSS0.02509EPSS
SaveExploits1References11
CVE
CVE
•added 2017/02/15 7:00 p.m.•142 views

CVE-2016-8691

CVE-2016-8691 affects the JasPer JPEG-2000 library. The issue is a divide-by-zero in jpc_dec_process_siz triggered by a crafted BMP image (XRsiz value) used with the imginfo command, leading to denial of service (application crash). Public advisories confirm JasPer upstream fixes and distro updat...

5.5CVSS5.9AI score0.02234EPSS
SaveExploits1References9Affected Software1
osv-ubuntu
osv-ubuntu
•added 2017/02/15 12:00 a.m.•10 views

UBUNTU-CVE-2016-9560

Stack-based buffer overflow in the jpctsfbgetbands2 function in jpctsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image...

7.8CVSS7.4AI score0.029EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2017/02/15 12:00 a.m.•34 views

CVE-2016-8692

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...

5.5CVSS6.8AI score0.02234EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•6 views

CVE-2016-8691: Divide By Zero

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

5.5CVSS7.3AI score0.02234EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•6 views

CVE-2016-8692: Divide By Zero

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...

5.5CVSS7.3AI score0.02234EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/02/15 12:00 a.m.•30 views

CVE-2016-8693

Double free vulnerability in the memclose function in jasstream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image to the imginfo command...

7.8CVSS7.5AI score0.0332EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2017/02/15 12:00 a.m.•38 views

CVE-2016-8691

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

5.5CVSS6.8AI score0.02234EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•6 views

CVE-2016-9560: Out-of-bounds Write

Stack-based buffer overflow in the jpctsfbgetbands2 function in jpctsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image...

7.8CVSS7.6AI score0.029EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/02/15 12:00 a.m.•37 views

CVE-2016-9560

Stack-based buffer overflow in the jpctsfbgetbands2 function in jpctsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image...

7.8CVSS7.4AI score0.029EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•6 views

CVE-2016-8693: Double Free

Double free vulnerability in the memclose function in jasstream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image to the imginfo command...

7.8CVSS7.7AI score0.0332EPSS
SaveExploits1References2
osv-ubuntu
osv-ubuntu
•added 2017/02/15 12:00 a.m.•12 views

UBUNTU-CVE-2016-8691

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

5.5CVSS6.8AI score0.02234EPSS
SaveExploits1References4
osv-ubuntu
osv-ubuntu
•added 2017/02/15 12:00 a.m.•15 views

UBUNTU-CVE-2016-8693

Double free vulnerability in the memclose function in jasstream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image to the imginfo command...

7.8CVSS7.5AI score0.0332EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•6 views

CVE-2016-8690: NULL Pointer Dereference

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted BMP image in an imginfo command...

5.5CVSS6.9AI score0.02509EPSS
SaveExploits1References2
osv-ubuntu
osv-ubuntu
•added 2017/02/15 12:00 a.m.•11 views

UBUNTU-CVE-2016-8692

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...

5.5CVSS6.8AI score0.02234EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2017/02/10 12:00 a.m.•70 views

Debian DSA-3785-1 : jasper - security update

Multiple vulnerabilities have been discovered in the JasPer library for processing JPEG-2000 images, which may result in denial of service or the execution of arbitrary code if a malformed image is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

7.8CVSS7.2AI score0.0332EPSS
SaveExploits5References9
Debian
Debian
•added 2017/02/09 10:29 p.m.•68 views

[SECURITY] [DSA 3785-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3785-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 09, 2017 https://www.debian.org/security/faq -...

7.8CVSS7.2AI score0.0332EPSS
SaveExploits5
osv-dsa
osv-dsa
•added 2017/02/09 12:00 a.m.•47 views

DSA-3785-1 jasper - security update

Bulletin has no description...

7.8CVSS6.7AI score0.0332EPSS
SaveExploits5
OpenVAS
OpenVAS
•added 2017/02/09 12:00 a.m.•39 views

Debian Security Advisory DSA 3785-1 (jasper - security update)

Multiple vulnerabilities have been discovered in the JasPer library for processing JPEG-2000 images, which may result in denial of service or the execution of arbitrary code if a malformed image is processed. OpenVAS Vulnerability Test $Id: deb3785.nasl 6607 2017-07-07 12:04:25Z cfischer $...

6.8CVSS7.2AI score0.0332EPSS
SaveExploits5References1
OpenVAS
OpenVAS
•added 2017/02/08 12:00 a.m.•28 views

Debian: Security Advisory (DSA-3785-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.0332EPSS
SaveExploits5References3
Rows per page
Query Builder