CVE

Id
95513  
CVE No.
CVE-2016-8693  
Status
Candidate  
Description
Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.  
Phase
Assigned (20161015)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
798818 95513 CVE-2016-8693 MLIST:[oss-security] 20160823 Fuzzing jasper  View
798819 95513 CVE-2016-8693 URL:http://www.openwall.com/lists/oss-security/2016/08/23/6  View
798820 95513 CVE-2016-8693 MLIST:[oss-security] 20161015 Re: Fuzzing jasper  View
798821 95513 CVE-2016-8693 URL:http://www.openwall.com/lists/oss-security/2016/10/16/14  View
798822 95513 CVE-2016-8693 MISC:https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/  View
798823 95513 CVE-2016-8693 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1385507  View
798824 95513 CVE-2016-8693 CONFIRM:https://github.com/mdadams/jasper/commit/44a524e367597af58d6265ae2014468b334d0309  View
798825 95513 CVE-2016-8693 FEDORA:FEDORA-2016-6c789ba91d  View
798826 95513 CVE-2016-8693 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/  View
798827 95513 CVE-2016-8693 SUSE:openSUSE-SU-2016:2722  View
798828 95513 CVE-2016-8693 URL:http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html  View
798829 95513 CVE-2016-8693 BID:93587  View

Related JVN