CVE

Id
95705  
CVE No.
CVE-2016-8885  
Status
Candidate  
Description
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.  
Phase
Assigned (20161022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799204 95705 CVE-2016-8885 MLIST:[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)  View
799205 95705 CVE-2016-8885 URL:http://www.openwall.com/lists/oss-security/2016/10/23/1  View
799206 95705 CVE-2016-8885 MLIST:[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)  View
799207 95705 CVE-2016-8885 URL:http://www.openwall.com/lists/oss-security/2016/10/23/5  View
799208 95705 CVE-2016-8885 MLIST:[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)  View
799209 95705 CVE-2016-8885 URL:http://www.openwall.com/lists/oss-security/2016/10/23/9  View
799210 95705 CVE-2016-8885 MISC:https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690  View
799211 95705 CVE-2016-8885 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1385499  View
799212 95705 CVE-2016-8885 FEDORA:FEDORA-2016-6c789ba91d  View
799213 95705 CVE-2016-8885 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/  View
799214 95705 CVE-2016-8885 FEDORA:FEDORA-2016-e0f0d48142  View
799215 95705 CVE-2016-8885 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/  View
799216 95705 CVE-2016-8885 BID:93834  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64543 JVNDB-2016-006318 Cisco Identity Services Engine の Active Directory 統合コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 Cisco Identity Services Engine (ISE) の Active Directory 統合コンポーネントには、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2016-9198 95705 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006318.html  View