CVE-2016-8882

Опубликовано: 17 окт. 2016

Источник: redhat

CVSS3: 7

CVSS2: 5.1

EPSS Низкий

Описание

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	netpbm	Not affected
Red Hat Enterprise Linux 6	jasper	Not affected
Red Hat Enterprise Linux 7	jasper	Not affected
Red Hat Enterprise Virtualization 3	mingw-virt-viewer	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-822

https://bugzilla.redhat.com/show_bug.cgi?id=1388866jasper: uninitialized tile->pi pointer use in JPC decoder

EPSS

Процентиль: 46%

0.00236

Низкий

7 High

CVSS3

5.1 Medium

CVSS2

Связанные уязвимости

CVE-2016-8882

CVSS3: 5.5

ubuntu

около 9 лет назад

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

CVE-2016-8882

CVSS3: 5.5

nvd

около 9 лет назад

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

CVE-2016-8882

CVSS3: 5.5

debian

около 9 лет назад

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer bef ...

GHSA-4mjr-hjjc-26r8

CVSS3: 5.5

github

больше 3 лет назад

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

SUSE-SU-2016:2776-1

suse-cvrf

около 9 лет назад

Security update for jasper

EPSS

Процентиль: 46%

0.00236

Низкий

7 High

CVSS3

5.1 Medium

CVSS2