CVE-2016-9398
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de jasper · Page n° 3
Vulnérabilité publiée pour jasper au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 79
CVE-2016-9397
The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Publication Mise à jourCVE-2016-9396
The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9395
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
Publication Mise à jourCVE-2016-9394
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9393
The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9392
The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9391
The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9390
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9389
The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9388
The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-9387
Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-8887
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-8886
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
Publication Mise à jourCVE-2016-8885
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.1
Publication Mise à jourCVE-2017-6852
Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image.
Publication Mise à jourCVE-2017-6850
The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-10251
Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.1
Publication Mise à jourCVE-2016-10250
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.2
Publication Mise à jourCVE-2016-10249
Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.
- Mettez à jour vers 1.900.1-debian1-2.4ubuntu1.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.