Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-8690

Опубликовано: 15 фев. 2017
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 5.5

Описание

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

РелизСтатусПримечание
artful

DNE

bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1.900.1-14ubuntu3.4]]
esm-infra/xenial

released

1.900.1-debian1-2.4ubuntu1.1
precise

ignored

end of life
precise/esm

DNE

precise was needed
trusty

released

1.900.1-14ubuntu3.4
trusty/esm

DNE

trusty was released [1.900.1-14ubuntu3.4]
upstream

needs-triage

Показывать по

EPSS

Процентиль: 61%
0.00421
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 7
redhat
около 9 лет назад

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

CVSS3: 5.5
nvd
больше 8 лет назад

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

CVSS3: 5.5
debian
больше 8 лет назад

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1 ...

CVSS3: 5.5
github
больше 3 лет назад

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

suse-cvrf
около 9 лет назад

Security update for jasper

EPSS

Процентиль: 61%
0.00421
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3