CVE-2016-9398

HOCH 7.5CVE-2016-9398 · Published 23/03/2017 · updated 17/06/2026

Kurz gesagt

CVE-2016-9398 ist eine Schwachstelle (HOCH (CVSS 7.5)) in jasper (jasper project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.0%, höher als bei 93.3% aller Schwachstellen.
Abhilfe: auf 1.900.17 oder neuer aktualisieren.

Package	Affected versions	Patched versions
jasper jasper_project	`< 1.900.17`	`1.900.17`

Description

The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html · Mailing List
openwall.com/lists/oss-security/2016/11/17/1 · Mailing List
securityfocus.com/bid/94382 · Third Party Advisory
blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure · Patch
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET

Weitere Schwachstellen in jasper

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free