RHSA-2017:1208
Vulnerability from csaf_opensuse - Published: 2017-05-09 00:00 - Updated: 2026-09-20 10:58Summary
security update for jasper
Severity
Important
Notes
Title of the patch: security update for jasper
Description of the patch: This security update provides a functional equivalent of RHSA-2017:1208.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2017:1208.
Patchnames: RHSA-2017:1208
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
low
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
important
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2015-5203
Threats
Impact
moderate
References
132 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for jasper",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2017:1208.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2017:1208.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2017:1208",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2017_1208.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5203 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5221 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10248 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10248/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10249 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10249/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10251 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10251/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1577 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1867 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1867/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2089 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2116 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8654 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8690 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8691 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8692 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8693 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8883 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8884 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8885 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9262 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9387 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9388 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9389 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9390 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9391 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9392 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9393 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9394 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9560 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9583 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9591 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9591/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9600 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9600/"
}
],
"title": "security update for jasper",
"tracking": {
"current_release_date": "2026-09-20T10:58:36Z",
"generator": {
"date": "2017-05-09T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2017:1208",
"initial_release_date": "2017-05-09T00:00:00Z",
"revision_history": [
{
"date": "2017-05-09T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T10:58:36Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "jasper-devel-0:1.900.1-30.el7_3.i686",
"product": {
"name": "jasper-devel-0:1.900.1-30.el7_3.i686",
"product_id": "jasper-devel-0:1.900.1-30.el7_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/jasper-devel@1.900.1-30.el7_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jasper-libs-0:1.900.1-30.el7_3.i686",
"product": {
"name": "jasper-libs-0:1.900.1-30.el7_3.i686",
"product_id": "jasper-libs-0:1.900.1-30.el7_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/suse/jasper-libs@1.900.1-30.el7_3?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "jasper-0:1.900.1-30.el7_3.x86_64",
"product": {
"name": "jasper-0:1.900.1-30.el7_3.x86_64",
"product_id": "jasper-0:1.900.1-30.el7_3.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:jasper_project:jasper:1.900.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/jasper@1.900.1-30.el7_3?arch=x86_64\u0026upstream=jasper-0:1.900.1-30.el7_3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "jasper-devel-0:1.900.1-30.el7_3.x86_64",
"product": {
"name": "jasper-devel-0:1.900.1-30.el7_3.x86_64",
"product_id": "jasper-devel-0:1.900.1-30.el7_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/jasper-devel@1.900.1-30.el7_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jasper-libs-0:1.900.1-30.el7_3.x86_64",
"product": {
"name": "jasper-libs-0:1.900.1-30.el7_3.x86_64",
"product_id": "jasper-libs-0:1.900.1-30.el7_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/jasper-libs@1.900.1-30.el7_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jasper-utils-0:1.900.1-30.el7_3.x86_64",
"product": {
"name": "jasper-utils-0:1.900.1-30.el7_3.x86_64",
"product_id": "jasper-utils-0:1.900.1-30.el7_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/jasper-utils@1.900.1-30.el7_3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jasper-0:1.900.1-30.el7_3.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64"
},
"product_reference": "jasper-0:1.900.1-30.el7_3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jasper-devel-0:1.900.1-30.el7_3.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686"
},
"product_reference": "jasper-devel-0:1.900.1-30.el7_3.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jasper-devel-0:1.900.1-30.el7_3.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64"
},
"product_reference": "jasper-devel-0:1.900.1-30.el7_3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jasper-libs-0:1.900.1-30.el7_3.i686 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686"
},
"product_reference": "jasper-libs-0:1.900.1-30.el7_3.i686",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jasper-libs-0:1.900.1-30.el7_3.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64"
},
"product_reference": "jasper-libs-0:1.900.1-30.el7_3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jasper-utils-0:1.900.1-30.el7_3.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
},
"product_reference": "jasper-utils-0:1.900.1-30.el7_3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5203"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5203",
"url": "https://www.suse.com/security/cve/CVE-2015-5203"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2015-5203",
"url": "https://bugzilla.suse.com/1178702"
},
{
"category": "external",
"summary": "SUSE Bug 941919 for CVE-2015-5203",
"url": "https://bugzilla.suse.com/941919"
},
{
"category": "external",
"summary": "SUSE Bug 942553 for CVE-2015-5203",
"url": "https://bugzilla.suse.com/942553"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5203"
},
{
"cve": "CVE-2015-5221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5221"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5221",
"url": "https://www.suse.com/security/cve/CVE-2015-5221"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2015-5221",
"url": "https://bugzilla.suse.com/1178702"
},
{
"category": "external",
"summary": "SUSE Bug 942553 for CVE-2015-5221",
"url": "https://bugzilla.suse.com/942553"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5221"
},
{
"cve": "CVE-2016-10248",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10248"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10248",
"url": "https://www.suse.com/security/cve/CVE-2016-10248"
},
{
"category": "external",
"summary": "SUSE Bug 1029705 for CVE-2016-10248",
"url": "https://bugzilla.suse.com/1029705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-10248"
},
{
"cve": "CVE-2016-10249",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10249"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10249",
"url": "https://www.suse.com/security/cve/CVE-2016-10249"
},
{
"category": "external",
"summary": "SUSE Bug 1029704 for CVE-2016-10249",
"url": "https://bugzilla.suse.com/1029704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-10249"
},
{
"cve": "CVE-2016-10251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10251"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10251",
"url": "https://www.suse.com/security/cve/CVE-2016-10251"
},
{
"category": "external",
"summary": "SUSE Bug 1029497 for CVE-2016-10251",
"url": "https://bugzilla.suse.com/1029497"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-10251",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-10251"
},
{
"cve": "CVE-2016-1577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1577"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1577",
"url": "https://www.suse.com/security/cve/CVE-2016-1577"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-1577",
"url": "https://bugzilla.suse.com/1178702"
},
{
"category": "external",
"summary": "SUSE Bug 968373 for CVE-2016-1577",
"url": "https://bugzilla.suse.com/968373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1577"
},
{
"cve": "CVE-2016-1867",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1867"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1867",
"url": "https://www.suse.com/security/cve/CVE-2016-1867"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-1867",
"url": "https://bugzilla.suse.com/1178702"
},
{
"category": "external",
"summary": "SUSE Bug 961886 for CVE-2016-1867",
"url": "https://bugzilla.suse.com/961886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1867"
},
{
"cve": "CVE-2016-2089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2089"
}
],
"notes": [
{
"category": "general",
"text": "The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2089",
"url": "https://www.suse.com/security/cve/CVE-2016-2089"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-2089",
"url": "https://bugzilla.suse.com/1178702"
},
{
"category": "external",
"summary": "SUSE Bug 963983 for CVE-2016-2089",
"url": "https://bugzilla.suse.com/963983"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-2089"
},
{
"cve": "CVE-2016-2116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2116"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2116",
"url": "https://www.suse.com/security/cve/CVE-2016-2116"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-2116",
"url": "https://bugzilla.suse.com/1178702"
},
{
"category": "external",
"summary": "SUSE Bug 968373 for CVE-2016-2116",
"url": "https://bugzilla.suse.com/968373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-2116"
},
{
"cve": "CVE-2016-8654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8654"
}
],
"notes": [
{
"category": "general",
"text": "A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8654",
"url": "https://www.suse.com/security/cve/CVE-2016-8654"
},
{
"category": "external",
"summary": "SUSE Bug 1012530 for CVE-2016-8654",
"url": "https://bugzilla.suse.com/1012530"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8654",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-8654"
},
{
"cve": "CVE-2016-8690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8690"
}
],
"notes": [
{
"category": "general",
"text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8690",
"url": "https://www.suse.com/security/cve/CVE-2016-8690"
},
{
"category": "external",
"summary": "SUSE Bug 1005084 for CVE-2016-8690",
"url": "https://bugzilla.suse.com/1005084"
},
{
"category": "external",
"summary": "SUSE Bug 1007009 for CVE-2016-8690",
"url": "https://bugzilla.suse.com/1007009"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8690",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8690"
},
{
"cve": "CVE-2016-8691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8691"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8691",
"url": "https://www.suse.com/security/cve/CVE-2016-8691"
},
{
"category": "external",
"summary": "SUSE Bug 1005090 for CVE-2016-8691",
"url": "https://bugzilla.suse.com/1005090"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8691",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8691"
},
{
"cve": "CVE-2016-8692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8692"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8692",
"url": "https://www.suse.com/security/cve/CVE-2016-8692"
},
{
"category": "external",
"summary": "SUSE Bug 1005090 for CVE-2016-8692",
"url": "https://bugzilla.suse.com/1005090"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8692",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8692"
},
{
"cve": "CVE-2016-8693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8693"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8693",
"url": "https://www.suse.com/security/cve/CVE-2016-8693"
},
{
"category": "external",
"summary": "SUSE Bug 1005242 for CVE-2016-8693",
"url": "https://bugzilla.suse.com/1005242"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8693",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8693"
},
{
"cve": "CVE-2016-8883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8883"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8883",
"url": "https://www.suse.com/security/cve/CVE-2016-8883"
},
{
"category": "external",
"summary": "SUSE Bug 1006598 for CVE-2016-8883",
"url": "https://bugzilla.suse.com/1006598"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8883",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-8883"
},
{
"cve": "CVE-2016-8884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8884"
}
],
"notes": [
{
"category": "general",
"text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8884",
"url": "https://www.suse.com/security/cve/CVE-2016-8884"
},
{
"category": "external",
"summary": "SUSE Bug 1005084 for CVE-2016-8884",
"url": "https://bugzilla.suse.com/1005084"
},
{
"category": "external",
"summary": "SUSE Bug 1007009 for CVE-2016-8884",
"url": "https://bugzilla.suse.com/1007009"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8884",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-8884"
},
{
"cve": "CVE-2016-8885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8885"
}
],
"notes": [
{
"category": "general",
"text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8885",
"url": "https://www.suse.com/security/cve/CVE-2016-8885"
},
{
"category": "external",
"summary": "SUSE Bug 1005084 for CVE-2016-8885",
"url": "https://bugzilla.suse.com/1005084"
},
{
"category": "external",
"summary": "SUSE Bug 1007009 for CVE-2016-8885",
"url": "https://bugzilla.suse.com/1007009"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-8885",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-8885"
},
{
"cve": "CVE-2016-9262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9262"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9262",
"url": "https://www.suse.com/security/cve/CVE-2016-9262"
},
{
"category": "external",
"summary": "SUSE Bug 1009994 for CVE-2016-9262",
"url": "https://bugzilla.suse.com/1009994"
},
{
"category": "external",
"summary": "SUSE Bug 1078851 for CVE-2016-9262",
"url": "https://bugzilla.suse.com/1078851"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9262",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-9262"
},
{
"cve": "CVE-2016-9387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9387"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9387",
"url": "https://www.suse.com/security/cve/CVE-2016-9387"
},
{
"category": "external",
"summary": "SUSE Bug 1010960 for CVE-2016-9387",
"url": "https://bugzilla.suse.com/1010960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-9387"
},
{
"cve": "CVE-2016-9388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9388"
}
],
"notes": [
{
"category": "general",
"text": "The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9388",
"url": "https://www.suse.com/security/cve/CVE-2016-9388"
},
{
"category": "external",
"summary": "SUSE Bug 1010975 for CVE-2016-9388",
"url": "https://bugzilla.suse.com/1010975"
},
{
"category": "external",
"summary": "SUSE Bug 1078851 for CVE-2016-9388",
"url": "https://bugzilla.suse.com/1078851"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9388",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9388"
},
{
"cve": "CVE-2016-9389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9389"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9389",
"url": "https://www.suse.com/security/cve/CVE-2016-9389"
},
{
"category": "external",
"summary": "SUSE Bug 1010968 for CVE-2016-9389",
"url": "https://bugzilla.suse.com/1010968"
},
{
"category": "external",
"summary": "SUSE Bug 1078851 for CVE-2016-9389",
"url": "https://bugzilla.suse.com/1078851"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9389",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9389"
},
{
"cve": "CVE-2016-9390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9390"
}
],
"notes": [
{
"category": "general",
"text": "The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9390",
"url": "https://www.suse.com/security/cve/CVE-2016-9390"
},
{
"category": "external",
"summary": "SUSE Bug 1010774 for CVE-2016-9390",
"url": "https://bugzilla.suse.com/1010774"
},
{
"category": "external",
"summary": "SUSE Bug 1078851 for CVE-2016-9390",
"url": "https://bugzilla.suse.com/1078851"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9390",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9390"
},
{
"cve": "CVE-2016-9391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9391"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9391",
"url": "https://www.suse.com/security/cve/CVE-2016-9391"
},
{
"category": "external",
"summary": "SUSE Bug 1010782 for CVE-2016-9391",
"url": "https://bugzilla.suse.com/1010782"
},
{
"category": "external",
"summary": "SUSE Bug 1078851 for CVE-2016-9391",
"url": "https://bugzilla.suse.com/1078851"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9391",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9391"
},
{
"cve": "CVE-2016-9392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9392"
}
],
"notes": [
{
"category": "general",
"text": "The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9392",
"url": "https://www.suse.com/security/cve/CVE-2016-9392"
},
{
"category": "external",
"summary": "SUSE Bug 1010757 for CVE-2016-9392",
"url": "https://bugzilla.suse.com/1010757"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9392",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9392"
},
{
"cve": "CVE-2016-9393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9393"
}
],
"notes": [
{
"category": "general",
"text": "The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9393",
"url": "https://www.suse.com/security/cve/CVE-2016-9393"
},
{
"category": "external",
"summary": "SUSE Bug 1010757 for CVE-2016-9393",
"url": "https://bugzilla.suse.com/1010757"
},
{
"category": "external",
"summary": "SUSE Bug 1010766 for CVE-2016-9393",
"url": "https://bugzilla.suse.com/1010766"
},
{
"category": "external",
"summary": "SUSE Bug 1078851 for CVE-2016-9393",
"url": "https://bugzilla.suse.com/1078851"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9393",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9393"
},
{
"cve": "CVE-2016-9394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9394"
}
],
"notes": [
{
"category": "general",
"text": "The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9394",
"url": "https://www.suse.com/security/cve/CVE-2016-9394"
},
{
"category": "external",
"summary": "SUSE Bug 1010756 for CVE-2016-9394",
"url": "https://bugzilla.suse.com/1010756"
},
{
"category": "external",
"summary": "SUSE Bug 1010757 for CVE-2016-9394",
"url": "https://bugzilla.suse.com/1010757"
},
{
"category": "external",
"summary": "SUSE Bug 1078851 for CVE-2016-9394",
"url": "https://bugzilla.suse.com/1078851"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9394",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9394"
},
{
"cve": "CVE-2016-9560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9560"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9560",
"url": "https://www.suse.com/security/cve/CVE-2016-9560"
},
{
"category": "external",
"summary": "SUSE Bug 1011830 for CVE-2016-9560",
"url": "https://bugzilla.suse.com/1011830"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9560",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-9560"
},
{
"cve": "CVE-2016-9583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9583"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9583",
"url": "https://www.suse.com/security/cve/CVE-2016-9583"
},
{
"category": "external",
"summary": "SUSE Bug 1015400 for CVE-2016-9583",
"url": "https://bugzilla.suse.com/1015400"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9583",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9583"
},
{
"cve": "CVE-2016-9591",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9591"
}
],
"notes": [
{
"category": "general",
"text": "JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9591",
"url": "https://www.suse.com/security/cve/CVE-2016-9591"
},
{
"category": "external",
"summary": "SUSE Bug 1015993 for CVE-2016-9591",
"url": "https://bugzilla.suse.com/1015993"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9591",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9591"
},
{
"cve": "CVE-2016-9600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9600"
}
],
"notes": [
{
"category": "general",
"text": "JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9600",
"url": "https://www.suse.com/security/cve/CVE-2016-9600"
},
{
"category": "external",
"summary": "SUSE Bug 1018088 for CVE-2016-9600",
"url": "https://bugzilla.suse.com/1018088"
},
{
"category": "external",
"summary": "SUSE Bug 1178702 for CVE-2016-9600",
"url": "https://bugzilla.suse.com/1178702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:jasper-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-devel-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.i686",
"SUSE Liberty Linux 7:jasper-libs-0:1.900.1-30.el7_3.x86_64",
"SUSE Liberty Linux 7:jasper-utils-0:1.900.1-30.el7_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2017-05-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9600"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.