CVE

Id
95510  
CVE No.
CVE-2016-8690  
Status
Candidate  
Description
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.  
Phase
Assigned (20161015)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
798784 95510 CVE-2016-8690 MLIST:[oss-security] 20160823 Fuzzing jasper  View
798785 95510 CVE-2016-8690 URL:http://www.openwall.com/lists/oss-security/2016/08/23/6  View
798786 95510 CVE-2016-8690 MLIST:[oss-security] 20161015 Re: Fuzzing jasper  View
798787 95510 CVE-2016-8690 URL:http://www.openwall.com/lists/oss-security/2016/10/16/14  View
798788 95510 CVE-2016-8690 MISC:https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/  View
798789 95510 CVE-2016-8690 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1385499  View
798790 95510 CVE-2016-8690 CONFIRM:https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca  View
798791 95510 CVE-2016-8690 FEDORA:FEDORA-2016-6c789ba91d  View
798792 95510 CVE-2016-8690 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/  View
798793 95510 CVE-2016-8690 BID:93590  View

Related JVN