CVE-2016-8887
published 2017-03-23CVE-2016-8887: The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer…
PriorityP421medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
EPSS
2.17%
80.0th percentile
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| jasper_project | jasper | <= 1.900.9 | — |
| jasper_project | jasper | <= 1.900.12 | — |
| jasper_project | jasper | >= 0 < 1.900.1-14ubuntu3.5 | 1.900.1-14ubuntu3.5 |
| jasper_project | jasper | >= 0 < 1.900.1-debian1-2.4ubuntu1.2 | 1.900.1-debian1-2.4ubuntu1.2 |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
JasPer vulnerabilities
vendor_ubuntu·2018-06-27
CVE-2015-5203 JasPer vulnerabilities
Title: JasPer vulnerabilities
Summary: Several security issues were fixed in JasPer.
It was discovered that JasPer incorrectly handled certain malformed
JPEG-2000 image files. If a user or automated system using JasPer were
tricked into opening a specially crafted image, an attacker could exploit
this to cause a denial of service or possibly execute code with the
privileges of the user invoking the program.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)
vendor_redhat·2016-10-18·CVSS 7.5
CVE-2016-10250 [HIGH] CWE-456 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)
jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
Package: netpbm (Red Hat Enterprise Linux 5) - Not affected
Package: jasper (Red Hat Enterprise Linux 6) - Not affected
Package: jasper (Red Hat Enterprise Linux 7) - Not affected
Package: mingw-virt-viewer (Red Hat Enterprise Virtualization 3) - Not affected
Red Hat
jasper: uninitialized pointer use in jp2_box_get()
vendor_redhat·2016-10-18·CVSS 5.5
CVE-2016-8887 [MEDIUM] CWE-456 jasper: uninitialized pointer use in jp2_box_get()
jasper: uninitialized pointer use in jp2_box_get()
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
Package: netpbm (Red Hat Enterprise Linux 5) - Not affected
Package: jasper (Red Hat Enterprise Linux 6) - Not affected
Package: jasper (Red Hat Enterprise Linux 7) - Not affected
Package: mingw-virt-viewer (Red Hat Enterprise Virtualization 3) - Not affected
GHSA
GHSA-gv2q-xcvg-jr5q: The jp2_colr_destroy function in libjasper/jp2/jp2_cod
ghsa_unreviewed·2022-05-14
CVE-2016-8887 [MEDIUM] CWE-476 GHSA-gv2q-xcvg-jr5q: The jp2_colr_destroy function in libjasper/jp2/jp2_cod
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
GHSA
GHSA-hc76-569j-jf8q: The jp2_colr_destroy function in jp2_cod
ghsa_unreviewed·2022-05-14·CVSS 5.5
CVE-2016-10250 [MEDIUM] CWE-476 GHSA-hc76-569j-jf8q: The jp2_colr_destroy function in jp2_cod
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
OSV
CVE-2016-8887: The jp2_colr_destroy function in libjasper/jp2/jp2_cod
osv·2017-03-23·CVSS 5.5
CVE-2016-8887 [MEDIUM] CVE-2016-8887: The jp2_colr_destroy function in libjasper/jp2/jp2_cod
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
OSV
CVE-2016-10250: The jp2_colr_destroy function in jp2_cod
osv·2017-03-15·CVSS 7.5
CVE-2016-10250 [HIGH] CVE-2016-10250: The jp2_colr_destroy function in jp2_cod
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 jasper: various flaws [fedora-all]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-10250 [HIGH] CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 jasper: various flaws [fedora-all]
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 jasper: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Bugzilla
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 mingw-jasper: various flaws [fedora-all]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-10250 [HIGH] CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 mingw-jasper: various flaws [fedora-all]
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 mingw-jasper: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit mess
Bugzilla
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 mingw-jasper: various flaws [epel-7]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-10250 [HIGH] CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 mingw-jasper: various flaws [epel-7]
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 mingw-jasper: various flaws [epel-7]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit mes
Bugzilla
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 jasper: various flaws [epel-5]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-10250 [HIGH] CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 jasper: various flaws [epel-5]
CVE-2016-10250 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 CVE-2016-8887 jasper: various flaws [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Bugzilla
CVE-2016-8887 jasper: uninitialized pointer use in jp2_box_get()
bugzilla·2016-10-26·CVSS 9.3
CVE-2016-8887 [CRITICAL] CVE-2016-8887 jasper: uninitialized pointer use in jp2_box_get()
CVE-2016-8887 jasper: uninitialized pointer use in jp2_box_get()
Null pointer dereference vulnerability in jp2_colr_destroy in jp2_cod.c was found.
Upstream patch:
https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358d
CVE assignment:
http://seclists.org/oss-sec/2016/q4/215
Discussion:
Created mingw-jasper tracking bugs for this issue:
Affects: fedora-all [bug 1388874]
Affects: epel-7 [bug 1388876]
---
Created jasper tracking bugs for this issue:
Affects: fedora-all [bug 1388873]
Affects: epel-5 [bug 1388875]
---
This isn't actually a NULL pointer dereference issue, but rather a use of uninitialized pointer. In the jp2_box_get() function, a variable box of type jp2_box_t is allocated using jas_malloc(). Data parsed from a read file is stored in the s
Bugzilla
CVE-2016-10250 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-10250 [HIGH] CVE-2016-10250 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)
CVE-2016-10250 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)
Null pointer dereference vulnerability in jp2_colr_destroy in jp2_cod.c was found. This is incomplete fix for CVE-2016-8887.
CVE request:
http://seclists.org/oss-sec/2016/q4/218
Upstream patch:
https://github.com/mdadams/jasper/commit/bdfe95a6e81ffb4b2fad31a76b57943695beed20
Discussion:
Created mingw-jasper tracking bugs for this issue:
Affects: fedora-all [bug 1388874]
Affects: epel-7 [bug 1388876]
---
Created jasper tracking bugs for this issue:
Affects: fedora-all [bug 1388873]
Affects: epel-5 [bug 1388875]
---
Merging with the original report, as we have no real need for separate bug.
*** This bug has been marked as a duplicate of bug 1388828 ***
---
This was assigned
http://www.openwall.com/lists/oss-security/2016/10/23/3http://www.openwall.com/lists/oss-security/2016/10/23/6http://www.securityfocus.com/bid/93835https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-chttps://bugzilla.redhat.com/show_bug.cgi?id=1388828https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358dhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/https://usn.ubuntu.com/3693-1/http://www.openwall.com/lists/oss-security/2016/10/23/3http://www.openwall.com/lists/oss-security/2016/10/23/6http://www.securityfocus.com/bid/93835https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-chttps://bugzilla.redhat.com/show_bug.cgi?id=1388828https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358dhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/https://usn.ubuntu.com/3693-1/
2017-03-23
Published