CVE-2016-8691

概要

参考情報

• debian.org/security/2017/dsa-3785 · Third Party Advisory
• openwall.com/lists/oss-security/2016/08/23/6 · Mailing List
• openwall.com/lists/oss-security/2016/10/16/14 · Mailing List
• securityfocus.com/bid/93593 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:1208
• blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c · Exploit
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• mdadams/jasper commit d8c2604 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM

jasper のその他の脆弱性

• CVE-2025-8837高 7.8A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the …
• CVE-2025-8836低 3.3A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc…
• CVE-2025-8835中 5.5A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper…
• CVE-2023-51257高 7.8An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
• CVE-2022-2963高 7.5A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a…