CVE-2016-8690

概要

参考情報

• openwall.com/lists/oss-security/2016/08/23/6 · Mailing List
• openwall.com/lists/oss-security/2016/10/16/14 · Mailing List
• securityfocus.com/bid/93590 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:1208
• blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c · Exploit
• bugzilla.redhat.com/show_bug.cgi · Exploit
• mdadams/jasper commit 8f62b47 · Patch
• lists.debian.org/debian-lts-announce/2018/11/msg00023.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD

jasper のその他の脆弱性

• CVE-2025-8837高 7.8A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the …
• CVE-2025-8836低 3.3A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc…
• CVE-2025-8835中 5.5A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper…
• CVE-2023-51257高 7.8An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
• CVE-2022-2963高 7.5A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a…