Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2016-8887

Published: 23/03/2017 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Jasper Project

Vulnerability Summary

The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer prior to 1.900.10 allows remote malicious users to cause a denial of service (NULL pointer dereference).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jasper project jasper

fedoraproject fedora 24

fedoraproject fedora 23

Vendor Advisories

Ubuntu Security Notice: jasper vulnerabilities
Several security issues were fixed in JasPer ...
Arch Linux Issues:
A null pointer dereference vulnerability was found in jp2_colr_destroy in jp2_codc leading to application crash ...

Github Repositories

https://github.com/kedjames/crashsearch-triage

CrashSearch We designed CrashSearch for the specific purpose of efficiently mapping a reported bug to related known bugs within a bug datastore, including both exact and inexact duplicates CrashSearch uses the symptoms of a crash to create a fingerprint that it uses to search for bugs with similar behaviors, and leverages sequential pattern mining to effectively showcase relat

References

CWE-476https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358dhttps://bugzilla.redhat.com/show_bug.cgi?id=1388828https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-chttp://www.openwall.com/lists/oss-security/2016/10/23/6http://www.openwall.com/lists/oss-security/2016/10/23/3http://www.securityfocus.com/bid/93835https://usn.ubuntu.com/3693-1/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/https://usn.ubuntu.com/3693-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook