rpm package
opensuse/jasper&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/jasper&distro=openSUSE%20Tumbleweed
Vulnerabilities (78)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2016-9396 | Hig | 7.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. | |
| CVE-2016-9395 | Med | 5.5 | < 1.900.14-3.1 | 1.900.14-3.1 | Mar 23, 2017 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9394 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9393 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9392 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | |
| CVE-2016-9391 | Hig | 7.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. | |
| CVE-2016-9390 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | |
| CVE-2016-9389 | Hig | 7.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure). | |
| CVE-2016-9388 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | |
| CVE-2016-9387 | Hig | 7.8 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure. | |
| CVE-2016-9262 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 23, 2017 | Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. | |
| CVE-2016-8887 | Med | 5.5 | < 1.900.14-3.1 | 1.900.14-3.1 | Mar 23, 2017 | The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference). | |
| CVE-2016-8886 | Hig | 7.8 | < 1.900.14-3.1 | 1.900.14-3.1 | Mar 23, 2017 | The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure. | |
| CVE-2016-8885 | Med | 5.5 | < 1.900.14-3.1 | 1.900.14-3.1 | Mar 23, 2017 | The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. | |
| CVE-2017-6850 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 15, 2017 | The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image. | |
| CVE-2016-10251 | Hig | 7.8 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 15, 2017 | Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value. | |
| CVE-2017-5503 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 1, 2017 | The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image. | |
| CVE-2017-5499 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 1, 2017 | Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. | |
| CVE-2017-5498 | Med | 5.5 | < 2.0.33-1.2 | 2.0.33-1.2 | Mar 1, 2017 | libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. | |
| CVE-2016-9560 | Hig | 7.8 | < 1.900.14-3.1 | 1.900.14-3.1 | Feb 15, 2017 | Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image. |
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
- affected < 1.900.14-3.1fixed 1.900.14-3.1
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
- affected < 1.900.14-3.1fixed 1.900.14-3.1
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
- affected < 1.900.14-3.1fixed 1.900.14-3.1
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
- affected < 1.900.14-3.1fixed 1.900.14-3.1
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.
- affected < 2.0.33-1.2fixed 2.0.33-1.2
libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.
- affected < 1.900.14-3.1fixed 1.900.14-3.1
Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
Page 3 of 4