CVE-2017-5500

CVE-2017-5500 affects JasPer 1.900.17 in libjasper/jpc/jpc_dec.c, where a denial of service (crash) can be triggered by vectors involving a left shift of a negative value. The connected documents confirm this exact vulnerable function/file and the nature of the impact (denial of service); no expl...

CVE-2017-5498

CVE-2017-5498 affects JasPer 1.900.17 (libjasper) via a flaw in jas_math.h where left-shifting a negative value triggers a denial of service (crash). Connected sources confirm this CVE is addressed by security updates in various Linux/SUSE/OpenSUSE advisories (e.g., openSUSE/SLES/SUSE updates) th...

CVE-2017-5501

CVE-2017-5501 affects JasPer 1.900.17: integer overflow in libjasper/jpc/jpc_tsfb.c can be triggered by a crafted file to cause a denial of service (crash). Connected sources confirm the vulnerable component but do not provide exploitation details or patch/version remediation within the supplied ...

CVE-2017-5502

CVE-2017-5502 affects JasPer 1.900.17: libjasper/jp2/jp2_dec.c allows remote attackers to crash the process via left-shift of a negative value (denial of service). Details across connected sources confirm the vulnerable component/version and the crash impact; no patch/mitigation is provided in th...

CVE-2017-5498

libjasper/include/jasper/jasmath.h in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

CVE-2017-5501

Integer overflow in libjasper/jpc/jpctsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2016-8690

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted BMP image in an imginfo command...

CVE-2016-8692

CVE-2016-8692 - JasPer before 1.900.4 is vulnerable to a denial of service via a crafted BMP image. The issue is a divide-by-zero error in jpc_dec_process_siz exploited when a malicious YRsiz value is processed by the imginfo command, leading to application crash. Affected component: JasPer JPEG ...

CVE-2016-8690

CVE-2016-8690 : The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer versions before 1.900.5 is vulnerable to a denial-of-service via a crafted BMP image in an imginfo command, caused by a NULL pointer dereference. Affected software can crash or become unresponsive when processing such i...

CVE-2016-8691

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

CVE-2016-8692

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...

CVE-2017-5499

Integer overflow in libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...

Null pointer dereference

The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2016-8882

The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2016-8692

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...

CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

Oracle: Security Advisory (ELSA-2009-0012)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libjasper-runtime package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libjasper-dev package for the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

SuSE 11.3 Security Update : libjasper (SAT Patch Number 10072)

This update for libjasper fixes multiple off-by-one errors which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow triggered by a crafted jp2 JPEG 2000 file. bsc906364, CVE-2014-9029 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...