JasPer integer overflow vulnerability (CNVD-2016-11401)

JasPer is an open source implementation of the JPEG-2000 codec . An integer overflow vulnerability exists in JasPer version 1.900.12, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, and a failed attack will result in a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11398)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11396)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11400)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11420)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11404)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

JasPer Denial of Service Vulnerability (CNVD-2016-11397)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Fedora 25 : jasper (2016-9b17661de5)

Security fix for CVE-2015-5203, CVE-2015-5221, CVE-2016-1867, CVE-2016-1577 and CVE-2016-2116. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 25 : jasper (2016-7bfdc9d8d8)

Fix broken ABI Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Netwo...

Fedora 25 : jasper (2016-39b00344ac)

New version of jasper is available 1.900.3 ---- Security fix for CVE-2016-2089 ---- New version of jasper is available. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Fedora 25 : jasper (2016-81f9c6f0ae)

New version of jasper is available jasper-1.900.13. Security fix for CVE-2016-8690, CVE-2016-8691, CVE-2016-8692, CVE-2016-8693. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

JasPer Integer Overflow Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in JasPer version 1.900.18. An attacker can exploit this vulnerability to execute arbitrary code in the context of a user's affected...

SUSE SLES11 Security Update : jasper (SUSE-SU-2016:2776-1)

This update for jasper fixes the following issues: Security fixes : - CVE-2016-8887: NULL pointer dereference in jp2colrdestroy jp2cod.c bsc1006836 - CVE-2016-8886: memory allocation failure in jasmalloc jasmalloc.c bsc1006599 - CVE-2016-8884,CVE-2016-8885: two NULL pointer dereferences in...

Fedora 23 : jasper (2016-6c789ba91d)

The remote Fedora 23 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-6c789ba91d advisory. This update contains security fix for CVE-2016-8883, CVE-2016-8882, CVE-2016-8881, CVE-2016-8880, CVE-2016-8884, CVE-2016-8885, CVE-2016-8887,...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2016:2775-1)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2016-8887: NULL pointer dereference in jp2colrdestroy jp2cod.c bsc1006836 - CVE-2016-8886: memory allocation failure in jasmalloc jasmalloc.c bsc1006599 - CVE-2016-8884,CVE-2016-8885: two NUL...

SUSE-SU-2016:2776-1 Security update for jasper

This update for jasper fixes the following issues: Security fixes: - CVE-2016-8887: NULL pointer dereference in jp2colrdestroy jp2cod.c bsc1006836 - CVE-2016-8886: memory allocation failure in jasmalloc jasmalloc.c bsc1006599 - CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in...

SUSE-SU-2016:2775-1 Security update for jasper

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed: - CVE-2016-8887: NULL pointer dereference in jp2colrdestroy jp2cod.c bsc1006836 - CVE-2016-8886: memory allocation failure in jasmalloc jasmalloc.c bsc1006599 - CVE-2016-8884,CVE-2016-8885: two null...

[SECURITY] Fedora 23 Update: jasper-1.900.13-1.fc23

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

CVE-2016-9262

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

[SECURITY] Fedora 24 Update: jasper-1.900.13-1.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...