CVE-2016-9560

Опубликовано: 20 нояб. 2016

Источник: redhat

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 5	netpbm	Will not fix
Red Hat Enterprise Virtualization 3	mingw-virt-viewer	Affected
Red Hat Enterprise Linux 6	jasper	Fixed	RHSA-2017:1208	09.05.2017
Red Hat Enterprise Linux 7	jasper	Fixed	RHSA-2017:1208	09.05.2017

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-121

https://bugzilla.redhat.com/show_bug.cgi?id=1398256jasper: stack-based buffer overflow in jpc_dec_tileinit()

EPSS

Процентиль: 60%

0.00401

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2016-9560

CVSS3: 7.8

ubuntu

больше 8 лет назад

Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.

CVE-2016-9560

CVSS3: 7.8

nvd

больше 8 лет назад

Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.

CVE-2016-9560

CVSS3: 7.8

debian

больше 8 лет назад

Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_ ...

GHSA-wf8h-4pv3-m27q

CVSS3: 7.8

github

больше 3 лет назад

Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.

openSUSE-SU-2017:0101-1

suse-cvrf

почти 9 лет назад

Security update for jasper

EPSS

Процентиль: 60%

0.00401

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2