Page 6 of 95 results (0.003 seconds)

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-9391 – jasper: reachable assertions in the JPC bitstream code

https://notcve.org/view.php?id=CVE-2016-9391

23 Mar 2017 — The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. La función jpc_bitstream_getbits en jpc_bs.c en JasPer en versiones anteriores a 2.0.10 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un entero muy grande. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer we... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-9392 – jasper: insufficient SIZ marker segment data sanity checks

https://notcve.org/view.php?id=CVE-2016-9392

23 Mar 2017 — The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. La función calcstepsizes en jpc_dec.c en JasPer en versiones anteriores a 1.900.17 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un archivo manipulado. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tricked into... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-9393 – jasper: insufficient SIZ marker segment data sanity checks

https://notcve.org/view.php?id=CVE-2016-9393

23 Mar 2017 — The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. La función jpc_pi_nextrpcl en jpc_t2cod.c en JasPer en versiones anteriores a 1.900.17 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un archivo manipulado. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tric... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-9394 – jasper: insufficient SIZ marker segment data sanity checks

https://notcve.org/view.php?id=CVE-2016-9394

23 Mar 2017 — The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. La función jas_seq2d_create en jas_seq.c en JasPer en versiones anteriores a 1.900.17 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un archivo manipulado. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tricke... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-20: Improper Input Validation CWE-617: Reachable Assertion •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-9395

https://notcve.org/view.php?id=CVE-2016-9395

23 Mar 2017 — The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. La función jas_seq2d_create en jas_seq.c en JasPer en versiones anteriores a 1.900.25 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un archivo manipulado. • http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0

CVE-2016-9396 – jasper: reachable assertion in JPC_NOMINALGAIN()

https://notcve.org/view.php?id=CVE-2016-9396

23 Mar 2017 — The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. La función JPC_NOMINALGAIN en jpc/jpc_t1cod.c en JasPer en la versión 2.0.12 permite a los atacantes remotos causar una denegación de servicio (fallo de aserción JPC_COX_RFT) mediante vectores no especificados. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated syst... • http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html • CWE-617: Reachable Assertion •

CVSS: 7.5EPSS: 2%CPEs: 3EXPL: 0

CVE-2016-9397

https://notcve.org/view.php?id=CVE-2016-9397

23 Mar 2017 — The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. La función jpc_dequantize en jpc_dec.c en JasPer 1.900.13 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de vectores no especificados. • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •

CVSS: 7.5EPSS: 3%CPEs: 14EXPL: 0

CVE-2016-9398

https://notcve.org/view.php?id=CVE-2016-9398

23 Mar 2017 — The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. La función jpc_floorlog2 en jpc_math.c en JasPer en versiones anteriores a 1.900.17 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de vectores no especificados. • http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html • CWE-617: Reachable Assertion •

CVSS: 7.5EPSS: 2%CPEs: 5EXPL: 0

CVE-2016-9399

https://notcve.org/view.php?id=CVE-2016-9399

23 Mar 2017 — The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. La función calcstepsizes en jpc_dec.c en JasPer 1.900.22 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de vectores no especificados. • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html • CWE-617: Reachable Assertion •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2017-5505 – Gentoo Linux Security Advisory 201908-03

https://notcve.org/view.php?id=CVE-2017-5505

16 Mar 2017 — The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image. La función jas_matrix_asl en jas_seq.c en JasPer 1.900.27 permite a atacantes provocar una denegación de servicio (lectura de memoria no válida y caída) a través de una imagen manipulada. Multiple vulnerabilities have been found in JasPer, the worst of which could result in a Denial of Service condition. Versions less than or equal to 2.0.16 ar... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •