CVE-2016-9560

概要

参考情報

• debian.org/security/2017/dsa-3785 · Third Party Advisory
• openwall.com/lists/oss-security/2016/11/20/1 · Exploit
• openwall.com/lists/oss-security/2016/11/23/5 · Mailing List
• securityfocus.com/bid/94428 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:1208 · Third Party Advisory
• blogs.gentoo.org/ago/2016/11/20/jasper-stack-based-buffer-overflow-in-jpc_tsfb_getbands2-jpc_tsfb-c · Exploit
• Hack-Me/Pocs_for_Multi_Versions · Exploit
• mdadams/jasper commit 1abc2e5 · Patch

jasper のその他の脆弱性

• CVE-2025-8837高 7.8A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the …
• CVE-2025-8836低 3.3A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc…
• CVE-2025-8835中 5.5A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper…
• CVE-2023-51257高 7.8An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
• CVE-2022-2963高 7.5A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a…