CVE-2016-9937

CVE-2016-9937 affects Asterisk Open Source versions 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. When an SDP offer/answer contains Opus and parameters separated by spaces, the Opus SDP parser recurses and crashes, causing a denial of service. The issue is remote and unauthenticated,...

CVE-2016-9937

An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. If an SDP offer or answer is received with the Opus codec and with the format parameters separated using a space the code responsible for parsing will recursively call itself until it crashe...

FreeBSD : asterisk -- Crash on SDP offer or answer from endpoint using Opus (9e6640fe-be3a-11e6-b04f-001999f8d30b)

The Asterisk project reports : If an SDP offer or answer is received with the Opus codec and with the format parameters separated using a space the code responsible for parsing will recursively call itself until it crashes. This occurs as the code does not properly handle spaces separating the...

CVE-2016-9937: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. If an SDP offer or answer is received with the Opus codec and with the format parameters separated using a space the code responsible for parsing will recursively call itself until it crashe...

PT-2016-7883

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.12.x through 13.13.0 Asterisk Open Source versions 14.x through 14.2.0 Description An issue was discovered where the code responsible for parsing SDP offers or answers with the Opus codec and format parameters...

[SECURITY] Fedora 24 Update: openjpeg2-2.1.2-2.fc24

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 25 Update: openjpeg2-2.1.2-2.fc25

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

Asterisk SDP Offer DoS Vulnerability (AST-2016-008)

Asterisk is prone to a SDP offer denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

UBUNTU-CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

PT-2016-7541

Name of the Vulnerable Software and Affected Versions jasper versions prior to 2.0.0 Description A heap-buffer overflow issue was discovered in the QMFB code of the JPC codec. This is caused by the buffer being allocated with a size that is too small. Recommendations For versions prior to 2.0.0,...

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

CVE-2016-9447

A memory corruption flaw was found in GStreamer's Nintendo NSF music file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application. Mitigation sud...

JasPer Denial of Service Vulnerability (CNVD-2016-11404)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

JasPer Denial of Service Vulnerability (CNVD-2016-11390)

JasPer is an open source implementation of the JPEG-2000 codec . A denial of service vulnerability exists in JasPer. An attacker exploiting this vulnerability could cause a denial of service breach...

JasPer Denial of Service Vulnerability (CNVD-2016-11403)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11398)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

DSA-3713-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

asterisk -- Crash on SDP offer or answer from endpoint using Opus

The Asterisk project reports: If an SDP offer or answer is received with the Opus codec and with the format parameters separated using a space the code responsible for parsing will recursively call itself until it crashes. This occurs as the code does not properly handle spaces separating the...

[SECURITY] Fedora 24 Update: libwebp-0.5.1-2.fc24

WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...