CVE

Id
95706  
CVE No.
CVE-2016-8886  
Status
Candidate  
Description
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.  
Phase
Assigned (20161022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799217 95706 CVE-2016-8886 MLIST:[oss-security] 20161022 Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)  View
799218 95706 CVE-2016-8886 URL:http://www.openwall.com/lists/oss-security/2016/10/23/2  View
799219 95706 CVE-2016-8886 MLIST:[oss-security] 20161025 Re: Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)  View
799220 95706 CVE-2016-8886 URL:http://www.openwall.com/lists/oss-security/2016/10/25/11  View
799221 95706 CVE-2016-8886 MISC:https://blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c  View
799222 95706 CVE-2016-8886 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1388880  View
799223 95706 CVE-2016-8886 FEDORA:FEDORA-2016-6c789ba91d  View
799224 95706 CVE-2016-8886 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/  View
799225 95706 CVE-2016-8886 FEDORA:FEDORA-2016-e0f0d48142  View
799226 95706 CVE-2016-8886 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/  View
799227 95706 CVE-2016-8886 BID:93839  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64506 JVNDB-2016-006281 Cisco IOx の Cisco Application-hosting Framework における任意のファイルを読まれる脆弱性 Cisco IOx の Cisco Application-hosting Framework (CAF) には、任意のファイルを読まれる脆弱性が存在します。 CVE-2016-9199 95706 6.8 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006281.html  View