CVE-2016-2116

CWE-399CWE-400 — Uncontrolled Resource Consumption12 documents7 sources
Severity
5.7MEDIUM
EPSS
7.3%
top 8.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jasper Project JasperCanonical Ubuntu Linux
Timeline
PublishedApr 13
Latest updateMay 14

Description

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:HExploitability: 2.1 | Impact: 3.6

Affected Packages2 packages

▶Ubuntujasper< 1.900.1-14ubuntu3.3+1

Also affects: Ubuntu Linux 12.04, 14.04, 15.10

🔴Vulnerability Details

4
GHSA
GHSA-mqg5-576j-g363: Memory leak in the jas_iccprof_createfrombuf function in JasPer 1↗2022-05-14
▶
CVEList
CVE-2016-2116: Memory leak in the jas_iccprof_createfrombuf function in JasPer 1↗2016-04-13
▶
OSV
CVE-2016-2116: Memory leak in the jas_iccprof_createfrombuf function in JasPer 1↗2016-03-03
▶
OSV
jasper vulnerabilities↗2016-03-03
▶

📋Vendor Advisories

2
Red Hat
jasper: memory leak in jas_iccprof_createfrombuf()↗2016-03-03
▶
Ubuntu
JasPer vulnerabilities↗2016-03-03
▶

💬Community

5
Bugzilla
CVE-2016-2116 jasper: Memory leak in jas_iccprof_createfrombuf causing memory consumption [fedora-all]↗2016-03-03
▶
Bugzilla
CVE-2016-2116 jasper: memory leak in jas_iccprof_createfrombuf()↗2016-03-03
▶
Bugzilla
CVE-2016-2116 mingw-jasper: jasper: Memory leak in jas_iccprof_createfrombuf causing memory consumption [fedora-all]↗2016-03-03
▶
Bugzilla
CVE-2016-2116 mingw-jasper: jasper: Memory leak in jas_iccprof_createfrombuf causing memory consumption [epel-7]↗2016-03-03
▶
Bugzilla
CVE-2016-2116 jasper: Memory leak in jas_iccprof_createfrombuf causing memory consumption [epel-5]↗2016-03-03
▶
CVE-2016-2116 (MEDIUM CVSS 5.7) | Memory leak in the jas_iccprof_crea | cvebase.io