Lucene search
+L

3030 matches found

RedhatCVE
RedhatCVE
•added 2016/12/15 7:10 p.m.•38 views

CVE-2016-9583

An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl function of jasper before 2.0.6 when processing crafted input...

7.8CVSS1.6AI score0.01889EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•63 views

Debian DLA-739-1 : jasper security updat

CVE-2016-8691 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8692 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8693 attempting double-free ... memclose ... jasstream.c CVE-2016-8882 segfault / NULL pointer access in jpcpidestroy CVE-2016-9560 stack-based...

7.8CVSS6.8AI score0.0332EPSS
SaveExploits5References10
Debian
Debian
•added 2016/12/10 5:17 p.m.•87 views

[SECURITY] [DLA 739-1] jasper security updat

Package : jasper Version : 1.900.1-13+deb7u5 CVE ID : CVE-2016-8654 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8882 CVE-2016-8883 CVE-2016-8887 CVE-2016-9560 TEMP-CVE CVE-2016-8691 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8692 FPE on unknown address...

7.8CVSS6.8AI score0.0332EPSS
SaveExploits5
osv_dla
osv_dla
•added 2016/12/10 12:00 a.m.•47 views

DLA-739-1 jasper - security update

Bulletin has no description...

7.8CVSS6.7AI score0.0332EPSS
SaveExploits6
ArchLinux
ArchLinux
•added 2016/12/07 12:00 a.m.•555 views

[ASA-201612-9] jasper: multiple issues

Arch Linux Security Advisory ASA-201612-9 ========================================= Severity: Critical Date : 2016-12-07 CVE-ID : CVE-2015-5203 CVE-2015-8751 CVE-2016-2089 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8884 CVE-2016-8885 CVE-2016-8887 CVE-2016-9262 CVE-2016-9387...

8.8CVSS7.4AI score0.0332EPSS
SaveExploits6References38
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•42 views

Fedora Update for jasper FEDORA-2016-7bfdc9d8d8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.01944EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•36 views

Fedora Update for jasper FEDORA-2016-9b17661de5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6CVSS7AI score0.03269EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•48 views

Fedora Update for jasper FEDORA-2016-81f9c6f0ae

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.0332EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•41 views

Fedora Update for jasper FEDORA-2016-39b00344ac

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.02963EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/12/02 12:00 a.m.•33 views

Fedora Update for jasper FEDORA-2016-e0f0d48142

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.0332EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2016/12/02 12:00 a.m.•77 views

Fedora Update for jasper FEDORA-2016-6c789ba91d

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.0332EPSS
SaveExploits4References2
CNVD
CNVD
•added 2016/12/01 12:00 a.m.•8 views

JasPer heap buffer overflow vulnerability (CNVD-2016-11816)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in JasPer, which arises from the program's failure to perform sufficient bounds checking on user-submitted input. A remote attacker cou...

7.8CVSS8.2AI score0.01881EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/11/30 10:17 p.m.•32 views

CVE-2016-8885

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...

7CVSS5AI score0.02509EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/11/30 10:17 p.m.•42 views

CVE-2016-8884

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690...

7CVSS4.9AI score0.02509EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2016/11/30 12:00 a.m.•21 views

UBUNTU-CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.4AI score0.01881EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2016/11/30 12:00 a.m.•4 views

PT-2016-7541

Name of the Vulnerable Software and Affected Versions jasper versions prior to 2.0.0 Description A heap-buffer overflow issue was discovered in the QMFB code of the JPC codec. This is caused by the buffer being allocated with a size that is too small. Recommendations For versions prior to 2.0.0,...

7.8CVSS0.029EPSS
SaveExploits2References88
UbuntuCve
UbuntuCve
•added 2016/11/30 12:00 a.m.•41 views

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.4AI score0.01881EPSS
SaveExploits1References2
CNVD
CNVD
•added 2016/11/29 12:00 a.m.•24 views

JasPer 'jas_image.c' Integer Overflow Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer 'jasimage.c' suffers from an integer overflow vulnerability that stems from the program's failure to perform sufficient bounds checking on user-submitted data. An attacker...

5.5CVSS6.5AI score0.01921EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/11/28 1:47 p.m.•37 views

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.4AI score0.01881EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/11/24 11:17 a.m.•26 views

CVE-2016-9560

Stack-based buffer overflow in the jpctsfbgetbands2 function in jpctsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image...

7.8CVSS8.4AI score0.029EPSS
SaveExploits1References1
Rows per page
Query Builder