CVE-2016-2089

CWE-20 — Improper Input ValidationCWE-476 — NULL Pointer Dereference11 documents7 sources
Severity
6.5MEDIUM
EPSS
0.8%
top 26.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Jasper Project Jasper
Timeline
PublishedFeb 8
Latest updateMay 14

Description

The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶Ubuntujasper< 1.900.1-14ubuntu3.4+1

🔴Vulnerability Details

3
GHSA
GHSA-gx5x-gf3p-pr98: The jas_matrix_clip function in jas_seq↗2022-05-14
▶
OSV
CVE-2016-2089: The jas_matrix_clip function in jas_seq↗2016-02-08
▶
CVEList
CVE-2016-2089: The jas_matrix_clip function in jas_seq↗2016-02-08
▶

📋Vendor Advisories

2
Ubuntu
JasPer vulnerabilities↗2017-05-18
▶
Red Hat
jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()↗2016-01-27
▶

💬Community

5
Bugzilla
CVE-2016-2089 mingw-jasper: jasper: invalid read in the JasPer's jas_matrix_clip() function [epel-7]↗2016-01-28
▶
Bugzilla
CVE-2016-2089 jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()↗2016-01-28
▶
Bugzilla
CVE-2016-2089 jasper: invalid read in the JasPer's jas_matrix_clip() function [epel-5]↗2016-01-28
▶
Bugzilla
CVE-2016-2089 jasper: invalid read in the JasPer's jas_matrix_clip() function [fedora-all]↗2016-01-28
▶
Bugzilla
CVE-2016-2089 mingw-jasper: jasper: invalid read in the JasPer's jas_matrix_clip() function [fedora-all]↗2016-01-28
▶
CVE-2016-2089 (MEDIUM CVSS 6.5) | The jas_matrix_clip function in jas | cvebase.io