CVE

Id
95704  
CVE No.
CVE-2016-8884  
Status
Candidate  
Description
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.  
Phase
Assigned (20161022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799192 95704 CVE-2016-8884 MLIST:[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)  View
799193 95704 CVE-2016-8884 URL:http://www.openwall.com/lists/oss-security/2016/10/23/1  View
799194 95704 CVE-2016-8884 MLIST:[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)  View
799195 95704 CVE-2016-8884 URL:http://www.openwall.com/lists/oss-security/2016/10/23/9  View
799196 95704 CVE-2016-8884 MISC:https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690/  View
799197 95704 CVE-2016-8884 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1385499  View
799198 95704 CVE-2016-8884 CONFIRM:https://github.com/mdadams/jasper/commit/5d66894d2313e3f3469f19066e149e08ff076698  View
799199 95704 CVE-2016-8884 FEDORA:FEDORA-2016-6c789ba91d  View
799200 95704 CVE-2016-8884 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/  View
799201 95704 CVE-2016-8884 FEDORA:FEDORA-2016-e0f0d48142  View
799202 95704 CVE-2016-8884 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/  View
799203 95704 CVE-2016-8884 BID:93834  View

Related JVN