EUVD-2017-5269

Malware in sbrugna...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. A malicious user can pass a jpc file to the jpcdequantize function in jpcdec.c to cause an assertion failure that can crash the application. This issue was also given CVE-2016-9397...

CVE-2016-9397

The jpcdequantize function in jpcdec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...