CVE-2016-8654

CWE-122 — Heap-based Buffer OverflowCWE-119 — Buffer Overflow11 documents7 sources
Severity
7.8HIGH
EPSS
0.2%
top 53.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Jasper Project JasperTHE Jasper Project JasperDebian Debian Linux+5 more
Timeline
PublishedAug 1
Latest updateMay 13

Description

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶Ubuntujasper< 1.900.1-14ubuntu3.4+1
▶CVEListV5the_jasper_project/jasper2.0.0

Also affects: Debian Linux 8.0, Enterprise Linux 7.3, 7.4, 7.5

Patches

Patch: bugzilla.redhat.com ↗Patch: github.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-fvh8-26m7-hp86: A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size↗2022-05-13
▶
CVEList
CVE-2016-8654: A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size↗2018-08-01
▶
OSV
CVE-2016-8654: A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size↗2016-11-30
▶

📋Vendor Advisories

2
Ubuntu
JasPer vulnerabilities↗2017-05-18
▶
Red Hat
jasper: heap-based buffer overflow in QMFB code in JPC codec↗2016-11-25
▶

💬Community

5
Bugzilla
CVE-2016-8654 mingw-jasper: jasper: Heap-based buffer overflow in QMFB code in JPC codec [epel-7]↗2016-11-28
▶
Bugzilla
CVE-2016-8654 mingw-jasper: jasper: Heap-based buffer overflow in QMFB code in JPC codec [fedora-all]↗2016-11-28
▶
Bugzilla
CVE-2016-8654 jasper: heap-based buffer overflow in QMFB code in JPC codec↗2016-11-28
▶
Bugzilla
CVE-2016-8654 jasper: Heap-based buffer overflow in QMFB code in JPC codec [fedora-all]↗2016-11-28
▶
Bugzilla
CVE-2016-8654 jasper: Heap-based buffer overflow in QMFB code in JPC codec [epel-5]↗2016-11-28
▶
CVE-2016-8654 (HIGH CVSS 7.8) | A heap-buffer overflow vulnerabilit | cvebase.io