Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-9398 (GCVE-0-2016-9398)
Vulnerability from cvelistv5
Published
2017-03-23 18:00
Modified
2024-08-06 02:50
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T02:50:37.755Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "name": "SUSE-SU-2017:0084", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "name": "[oss-security] 20161117 Re: jasper: multiple assertion failures", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "name": "openSUSE-SU-2017:0101", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "name": "94382", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/94382" }, { "name": "openSUSE-SU-2020:1517", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "name": "openSUSE-SU-2020:1523", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "name": "FEDORA-2021-2b151590d9", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2016-11-17T00:00:00", "descriptions": [ { "lang": "en", "value": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-02-03T03:06:07", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "name": "SUSE-SU-2017:0084", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "name": "[oss-security] 20161117 Re: jasper: multiple assertion failures", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "name": "openSUSE-SU-2017:0101", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "name": "94382", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/94382" }, { "name": "openSUSE-SU-2020:1517", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "name": "openSUSE-SU-2020:1523", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "name": "FEDORA-2021-2b151590d9", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-9398", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure", "refsource": "MISC", "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "name": "SUSE-SU-2017:0084", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "name": "[oss-security] 20161117 Re: jasper: multiple assertion failures", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "name": "openSUSE-SU-2017:0101", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "name": "94382", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94382" }, { "name": "openSUSE-SU-2020:1517", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "name": "openSUSE-SU-2020:1523", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "name": "FEDORA-2021-2b151590d9", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2016-9398", "datePublished": "2017-03-23T18:00:00", "dateReserved": "2016-11-17T00:00:00", "dateUpdated": "2024-08-06T02:50:37.755Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2016-9398\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-03-23T18:59:01.020\",\"lastModified\":\"2025-04-20T01:37:25.860\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n jpc_floorlog2 en jpc_math.c en JasPer en versiones anteriores a 1.900.17 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (fallo de aserci\u00f3n) a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.900.17\",\"matchCriteriaId\":\"6261556A-89A5-417D-9FD4-31A5E70D4EF3\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B009C22E-30A4-4288-BCF6-C3E81DEAF45A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4863BE36-D16A-4D75-90D9-FD76DB5B48B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"57CFAD92-EECD-417D-ADDB-8178C320B204\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2076747F-A98E-4DD9-9B52-BF1732BCAD3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"F84B2729-7B52-4505-9656-1BD31B980705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*\",\"matchCriteriaId\":\"F2681D87-58A9-4A56-BE97-B00C5061CA32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A633996-2FD7-467C-BAA6-529E16BD06D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F150BD9-4B94-42D3-9E14-58665B7FF220\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/11/17/1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/94382\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1396980\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/11/17/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/94382\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1396980\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
opensuse-su-2020:1517-1
Vulnerability from csaf_opensuse
Published
2020-09-24 12:21
Modified
2020-09-24 12:21
Summary
Security update for jasper
Notes
Title of the patch
Security update for jasper
Description of the patch
This update for jasper fixes the following issues:
- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).
- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).
- CVE-2017-5499: Validate component depth bit (bsc#1020451).
- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).
- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).
- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).
- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).
- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).
- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).
- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).
- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).
- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).
- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2020-1517
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jasper", "title": "Title of the patch" }, { "category": "description", "text": "This update for jasper fixes the following issues:\n\n- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).\n- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).\n- CVE-2017-5499: Validate component depth bit (bsc#1020451).\n- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).\n- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).\n- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).\n- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).\n- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).\n- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).\n- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).\n- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).\n- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).\n- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).\n\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2020-1517", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1517-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2020:1517-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZNYUBLSX2ZSBGFVNDEMDDHDZ2UPLCJR2/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2020:1517-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZNYUBLSX2ZSBGFVNDEMDDHDZ2UPLCJR2/" }, { "category": "self", "summary": "SUSE Bug 1010979", "url": "https://bugzilla.suse.com/1010979" }, { "category": "self", "summary": "SUSE Bug 1010980", "url": "https://bugzilla.suse.com/1010980" }, { "category": "self", "summary": "SUSE Bug 1020451", "url": "https://bugzilla.suse.com/1020451" }, { "category": "self", "summary": "SUSE Bug 1020456", "url": "https://bugzilla.suse.com/1020456" }, { "category": "self", "summary": "SUSE Bug 1020458", "url": "https://bugzilla.suse.com/1020458" }, { "category": "self", "summary": "SUSE Bug 1020460", "url": "https://bugzilla.suse.com/1020460" }, { "category": "self", "summary": "SUSE Bug 1045450", "url": "https://bugzilla.suse.com/1045450" }, { "category": "self", "summary": "SUSE Bug 1057152", "url": "https://bugzilla.suse.com/1057152" }, { "category": "self", "summary": "SUSE Bug 1088278", "url": "https://bugzilla.suse.com/1088278" }, { "category": "self", "summary": "SUSE Bug 1114498", "url": "https://bugzilla.suse.com/1114498" }, { "category": "self", "summary": "SUSE Bug 1115637", "url": "https://bugzilla.suse.com/1115637" }, { "category": "self", "summary": "SUSE Bug 1117328", "url": "https://bugzilla.suse.com/1117328" }, { "category": "self", "summary": "SUSE Bug 1120805", "url": "https://bugzilla.suse.com/1120805" }, { "category": "self", "summary": "SUSE Bug 1120807", "url": "https://bugzilla.suse.com/1120807" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9398 page", "url": "https://www.suse.com/security/cve/CVE-2016-9398/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9399 page", "url": "https://www.suse.com/security/cve/CVE-2016-9399/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-14132 page", "url": "https://www.suse.com/security/cve/CVE-2017-14132/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5499 page", "url": "https://www.suse.com/security/cve/CVE-2017-5499/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5503 page", "url": "https://www.suse.com/security/cve/CVE-2017-5503/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5504 page", "url": "https://www.suse.com/security/cve/CVE-2017-5504/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5505 page", "url": "https://www.suse.com/security/cve/CVE-2017-5505/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-9782 page", "url": "https://www.suse.com/security/cve/CVE-2017-9782/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-18873 page", "url": "https://www.suse.com/security/cve/CVE-2018-18873/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19139 page", "url": "https://www.suse.com/security/cve/CVE-2018-19139/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19543 page", "url": "https://www.suse.com/security/cve/CVE-2018-19543/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20570 page", "url": "https://www.suse.com/security/cve/CVE-2018-20570/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20622 page", "url": "https://www.suse.com/security/cve/CVE-2018-20622/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9252 page", "url": "https://www.suse.com/security/cve/CVE-2018-9252/" } ], "title": "Security update for jasper", "tracking": { "current_release_date": "2020-09-24T12:21:31Z", "generator": { "date": "2020-09-24T12:21:31Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2020:1517-1", "initial_release_date": "2020-09-24T12:21:31Z", "revision_history": [ { "date": "2020-09-24T12:21:31Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-lp151.4.9.1.i586", "product": { "name": "jasper-2.0.14-lp151.4.9.1.i586", "product_id": "jasper-2.0.14-lp151.4.9.1.i586" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-lp151.4.9.1.i586", "product": { "name": "libjasper-devel-2.0.14-lp151.4.9.1.i586", "product_id": "libjasper-devel-2.0.14-lp151.4.9.1.i586" } }, { "category": "product_version", "name": "libjasper4-2.0.14-lp151.4.9.1.i586", "product": { "name": "libjasper4-2.0.14-lp151.4.9.1.i586", "product_id": "libjasper4-2.0.14-lp151.4.9.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-lp151.4.9.1.x86_64", "product": { "name": "jasper-2.0.14-lp151.4.9.1.x86_64", "product_id": "jasper-2.0.14-lp151.4.9.1.x86_64" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "product": { "name": "libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "product_id": "libjasper-devel-2.0.14-lp151.4.9.1.x86_64" } }, { "category": "product_version", "name": "libjasper4-2.0.14-lp151.4.9.1.x86_64", "product": { "name": "libjasper4-2.0.14-lp151.4.9.1.x86_64", "product_id": "libjasper4-2.0.14-lp151.4.9.1.x86_64" } }, { "category": "product_version", "name": "libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64", "product": { "name": "libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64", "product_id": "libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.1", "product": { "name": "openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.1" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-lp151.4.9.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586" }, "product_reference": "jasper-2.0.14-lp151.4.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-lp151.4.9.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64" }, "product_reference": "jasper-2.0.14-lp151.4.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-lp151.4.9.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586" }, "product_reference": "libjasper-devel-2.0.14-lp151.4.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-lp151.4.9.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64" }, "product_reference": "libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-lp151.4.9.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586" }, "product_reference": "libjasper4-2.0.14-lp151.4.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-lp151.4.9.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64" }, "product_reference": "libjasper4-2.0.14-lp151.4.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" }, "product_reference": "libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9398" } ], "notes": [ { "category": "general", "text": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9398", "url": "https://www.suse.com/security/cve/CVE-2016-9398" }, { "category": "external", "summary": "SUSE Bug 1010979 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1010979" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2016-9398" }, { "cve": "CVE-2016-9399", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9399" } ], "notes": [ { "category": "general", "text": "The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9399", "url": "https://www.suse.com/security/cve/CVE-2016-9399" }, { "category": "external", "summary": "SUSE Bug 1010980 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1010980" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2016-9399" }, { "cve": "CVE-2017-14132", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-14132" } ], "notes": [ { "category": "general", "text": "JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-14132", "url": "https://www.suse.com/security/cve/CVE-2017-14132" }, { "category": "external", "summary": "SUSE Bug 1057152 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1057152" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "low" } ], "title": "CVE-2017-14132" }, { "cve": "CVE-2017-5499", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5499" } ], "notes": [ { "category": "general", "text": "Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5499", "url": "https://www.suse.com/security/cve/CVE-2017-5499" }, { "category": "external", "summary": "SUSE Bug 1020451 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020451" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2017-5499" }, { "cve": "CVE-2017-5503", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5503" } ], "notes": [ { "category": "general", "text": "The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5503", "url": "https://www.suse.com/security/cve/CVE-2017-5503" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2017-5503" }, { "cve": "CVE-2017-5504", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5504" } ], "notes": [ { "category": "general", "text": "The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5504", "url": "https://www.suse.com/security/cve/CVE-2017-5504" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2017-5504" }, { "cve": "CVE-2017-5505", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5505" } ], "notes": [ { "category": "general", "text": "The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5505", "url": "https://www.suse.com/security/cve/CVE-2017-5505" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2017-5505" }, { "cve": "CVE-2017-9782", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-9782" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-9782", "url": "https://www.suse.com/security/cve/CVE-2017-9782" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "low" } ], "title": "CVE-2017-9782" }, { "cve": "CVE-2018-18873", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-18873" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-18873", "url": "https://www.suse.com/security/cve/CVE-2018-18873" }, { "category": "external", "summary": "SUSE Bug 1114495 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114495" }, { "category": "external", "summary": "SUSE Bug 1114498 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114498" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "low" } ], "title": "CVE-2018-18873" }, { "cve": "CVE-2018-19139", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19139" } ], "notes": [ { "category": "general", "text": "An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19139", "url": "https://www.suse.com/security/cve/CVE-2018-19139" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "low" } ], "title": "CVE-2018-19139" }, { "cve": "CVE-2018-19543", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19543" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19543", "url": "https://www.suse.com/security/cve/CVE-2018-19543" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1117507 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117507" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "low" } ], "title": "CVE-2018-19543" }, { "cve": "CVE-2018-20570", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20570" } ], "notes": [ { "category": "general", "text": "jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20570", "url": "https://www.suse.com/security/cve/CVE-2018-20570" }, { "category": "external", "summary": "SUSE Bug 1120807 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1120807" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2018-20570" }, { "cve": "CVE-2018-20622", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20622" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when \"--output-format jp2\" is used.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20622", "url": "https://www.suse.com/security/cve/CVE-2018-20622" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1120805 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1120805" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "moderate" } ], "title": "CVE-2018-20622" }, { "cve": "CVE-2018-9252", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9252" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9252", "url": "https://www.suse.com/security/cve/CVE-2018-9252" }, { "category": "external", "summary": "SUSE Bug 1088278 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1088278" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:jasper-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper-devel-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.i586", "openSUSE Leap 15.1:libjasper4-2.0.14-lp151.4.9.1.x86_64", "openSUSE Leap 15.1:libjasper4-32bit-2.0.14-lp151.4.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-24T12:21:31Z", "details": "low" } ], "title": "CVE-2018-9252" } ] }
opensuse-su-2020:1523-1
Vulnerability from csaf_opensuse
Published
2020-09-25 04:22
Modified
2020-09-25 04:22
Summary
Security update for jasper
Notes
Title of the patch
Security update for jasper
Description of the patch
This update for jasper fixes the following issues:
- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).
- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).
- CVE-2017-5499: Validate component depth bit (bsc#1020451).
- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).
- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).
- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).
- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).
- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).
- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).
- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).
- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).
- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).
- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2020-1523
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jasper", "title": "Title of the patch" }, { "category": "description", "text": "This update for jasper fixes the following issues:\n\n- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).\n- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).\n- CVE-2017-5499: Validate component depth bit (bsc#1020451).\n- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).\n- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).\n- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).\n- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).\n- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).\n- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).\n- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).\n- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).\n- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).\n- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).\n\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2020-1523", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1523-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2020:1523-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XELIATUTDCJHZIDKI34SIWLYOQXNSG3Q/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2020:1523-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XELIATUTDCJHZIDKI34SIWLYOQXNSG3Q/" }, { "category": "self", "summary": "SUSE Bug 1010979", "url": "https://bugzilla.suse.com/1010979" }, { "category": "self", "summary": "SUSE Bug 1010980", "url": "https://bugzilla.suse.com/1010980" }, { "category": "self", "summary": "SUSE Bug 1020451", "url": "https://bugzilla.suse.com/1020451" }, { "category": "self", "summary": "SUSE Bug 1020456", "url": "https://bugzilla.suse.com/1020456" }, { "category": "self", "summary": "SUSE Bug 1020458", "url": "https://bugzilla.suse.com/1020458" }, { "category": "self", "summary": "SUSE Bug 1020460", "url": "https://bugzilla.suse.com/1020460" }, { "category": "self", "summary": "SUSE Bug 1045450", "url": "https://bugzilla.suse.com/1045450" }, { "category": "self", "summary": "SUSE Bug 1057152", "url": "https://bugzilla.suse.com/1057152" }, { "category": "self", "summary": "SUSE Bug 1088278", "url": "https://bugzilla.suse.com/1088278" }, { "category": "self", "summary": "SUSE Bug 1114498", "url": "https://bugzilla.suse.com/1114498" }, { "category": "self", "summary": "SUSE Bug 1115637", "url": "https://bugzilla.suse.com/1115637" }, { "category": "self", "summary": "SUSE Bug 1117328", "url": "https://bugzilla.suse.com/1117328" }, { "category": "self", "summary": "SUSE Bug 1120805", "url": "https://bugzilla.suse.com/1120805" }, { "category": "self", "summary": "SUSE Bug 1120807", "url": "https://bugzilla.suse.com/1120807" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9398 page", "url": "https://www.suse.com/security/cve/CVE-2016-9398/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9399 page", "url": "https://www.suse.com/security/cve/CVE-2016-9399/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-14132 page", "url": "https://www.suse.com/security/cve/CVE-2017-14132/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5499 page", "url": "https://www.suse.com/security/cve/CVE-2017-5499/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5503 page", "url": "https://www.suse.com/security/cve/CVE-2017-5503/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5504 page", "url": "https://www.suse.com/security/cve/CVE-2017-5504/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5505 page", "url": "https://www.suse.com/security/cve/CVE-2017-5505/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-9782 page", "url": "https://www.suse.com/security/cve/CVE-2017-9782/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-18873 page", "url": "https://www.suse.com/security/cve/CVE-2018-18873/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19139 page", "url": "https://www.suse.com/security/cve/CVE-2018-19139/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19543 page", "url": "https://www.suse.com/security/cve/CVE-2018-19543/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20570 page", "url": "https://www.suse.com/security/cve/CVE-2018-20570/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20622 page", "url": "https://www.suse.com/security/cve/CVE-2018-20622/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9252 page", "url": "https://www.suse.com/security/cve/CVE-2018-9252/" } ], "title": "Security update for jasper", "tracking": { "current_release_date": "2020-09-25T04:22:30Z", "generator": { "date": "2020-09-25T04:22:30Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2020:1523-1", "initial_release_date": "2020-09-25T04:22:30Z", "revision_history": [ { "date": "2020-09-25T04:22:30Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-lp152.7.3.1.i586", "product": { "name": "jasper-2.0.14-lp152.7.3.1.i586", "product_id": "jasper-2.0.14-lp152.7.3.1.i586" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-lp152.7.3.1.i586", "product": { "name": "libjasper-devel-2.0.14-lp152.7.3.1.i586", "product_id": "libjasper-devel-2.0.14-lp152.7.3.1.i586" } }, { "category": "product_version", "name": "libjasper4-2.0.14-lp152.7.3.1.i586", "product": { "name": "libjasper4-2.0.14-lp152.7.3.1.i586", "product_id": "libjasper4-2.0.14-lp152.7.3.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-lp152.7.3.1.x86_64", "product": { "name": "jasper-2.0.14-lp152.7.3.1.x86_64", "product_id": "jasper-2.0.14-lp152.7.3.1.x86_64" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "product": { "name": "libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "product_id": "libjasper-devel-2.0.14-lp152.7.3.1.x86_64" } }, { "category": "product_version", "name": "libjasper4-2.0.14-lp152.7.3.1.x86_64", "product": { "name": "libjasper4-2.0.14-lp152.7.3.1.x86_64", "product_id": "libjasper4-2.0.14-lp152.7.3.1.x86_64" } }, { "category": "product_version", "name": "libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64", "product": { "name": "libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64", "product_id": "libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.2", "product": { "name": "openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-lp152.7.3.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586" }, "product_reference": "jasper-2.0.14-lp152.7.3.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-lp152.7.3.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64" }, "product_reference": "jasper-2.0.14-lp152.7.3.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-lp152.7.3.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586" }, "product_reference": "libjasper-devel-2.0.14-lp152.7.3.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-lp152.7.3.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64" }, "product_reference": "libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-lp152.7.3.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586" }, "product_reference": "libjasper4-2.0.14-lp152.7.3.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-lp152.7.3.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64" }, "product_reference": "libjasper4-2.0.14-lp152.7.3.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" }, "product_reference": "libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9398" } ], "notes": [ { "category": "general", "text": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9398", "url": "https://www.suse.com/security/cve/CVE-2016-9398" }, { "category": "external", "summary": "SUSE Bug 1010979 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1010979" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2016-9398" }, { "cve": "CVE-2016-9399", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9399" } ], "notes": [ { "category": "general", "text": "The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9399", "url": "https://www.suse.com/security/cve/CVE-2016-9399" }, { "category": "external", "summary": "SUSE Bug 1010980 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1010980" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2016-9399" }, { "cve": "CVE-2017-14132", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-14132" } ], "notes": [ { "category": "general", "text": "JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-14132", "url": "https://www.suse.com/security/cve/CVE-2017-14132" }, { "category": "external", "summary": "SUSE Bug 1057152 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1057152" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "low" } ], "title": "CVE-2017-14132" }, { "cve": "CVE-2017-5499", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5499" } ], "notes": [ { "category": "general", "text": "Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5499", "url": "https://www.suse.com/security/cve/CVE-2017-5499" }, { "category": "external", "summary": "SUSE Bug 1020451 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020451" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2017-5499" }, { "cve": "CVE-2017-5503", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5503" } ], "notes": [ { "category": "general", "text": "The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5503", "url": "https://www.suse.com/security/cve/CVE-2017-5503" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2017-5503" }, { "cve": "CVE-2017-5504", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5504" } ], "notes": [ { "category": "general", "text": "The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5504", "url": "https://www.suse.com/security/cve/CVE-2017-5504" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2017-5504" }, { "cve": "CVE-2017-5505", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5505" } ], "notes": [ { "category": "general", "text": "The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5505", "url": "https://www.suse.com/security/cve/CVE-2017-5505" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2017-5505" }, { "cve": "CVE-2017-9782", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-9782" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-9782", "url": "https://www.suse.com/security/cve/CVE-2017-9782" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "low" } ], "title": "CVE-2017-9782" }, { "cve": "CVE-2018-18873", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-18873" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-18873", "url": "https://www.suse.com/security/cve/CVE-2018-18873" }, { "category": "external", "summary": "SUSE Bug 1114495 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114495" }, { "category": "external", "summary": "SUSE Bug 1114498 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114498" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "low" } ], "title": "CVE-2018-18873" }, { "cve": "CVE-2018-19139", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19139" } ], "notes": [ { "category": "general", "text": "An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19139", "url": "https://www.suse.com/security/cve/CVE-2018-19139" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "low" } ], "title": "CVE-2018-19139" }, { "cve": "CVE-2018-19543", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19543" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19543", "url": "https://www.suse.com/security/cve/CVE-2018-19543" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1117507 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117507" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "low" } ], "title": "CVE-2018-19543" }, { "cve": "CVE-2018-20570", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20570" } ], "notes": [ { "category": "general", "text": "jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20570", "url": "https://www.suse.com/security/cve/CVE-2018-20570" }, { "category": "external", "summary": "SUSE Bug 1120807 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1120807" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2018-20570" }, { "cve": "CVE-2018-20622", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20622" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when \"--output-format jp2\" is used.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20622", "url": "https://www.suse.com/security/cve/CVE-2018-20622" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1120805 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1120805" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "moderate" } ], "title": "CVE-2018-20622" }, { "cve": "CVE-2018-9252", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9252" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9252", "url": "https://www.suse.com/security/cve/CVE-2018-9252" }, { "category": "external", "summary": "SUSE Bug 1088278 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1088278" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:jasper-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper-devel-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.i586", "openSUSE Leap 15.2:libjasper4-2.0.14-lp152.7.3.1.x86_64", "openSUSE Leap 15.2:libjasper4-32bit-2.0.14-lp152.7.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-25T04:22:30Z", "details": "low" } ], "title": "CVE-2018-9252" } ] }
opensuse-su-2024:10281-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
jasper-1.900.14-3.1 on GA media
Notes
Title of the patch
jasper-1.900.14-3.1 on GA media
Description of the patch
These are all security issues fixed in the jasper-1.900.14-3.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10281
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "jasper-1.900.14-3.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the jasper-1.900.14-3.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10281", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10281-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2008-3522 page", "url": "https://www.suse.com/security/cve/CVE-2008-3522/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-4516 page", "url": "https://www.suse.com/security/cve/CVE-2011-4516/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-4517 page", "url": "https://www.suse.com/security/cve/CVE-2011-4517/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8137 page", "url": "https://www.suse.com/security/cve/CVE-2014-8137/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8138 page", "url": "https://www.suse.com/security/cve/CVE-2014-8138/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8157 page", "url": "https://www.suse.com/security/cve/CVE-2014-8157/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8158 page", "url": "https://www.suse.com/security/cve/CVE-2014-8158/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-9029 page", "url": "https://www.suse.com/security/cve/CVE-2014-9029/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-5203 page", "url": "https://www.suse.com/security/cve/CVE-2015-5203/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-5221 page", "url": "https://www.suse.com/security/cve/CVE-2015-5221/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-1577 page", "url": "https://www.suse.com/security/cve/CVE-2016-1577/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-1867 page", "url": "https://www.suse.com/security/cve/CVE-2016-1867/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2089 page", "url": "https://www.suse.com/security/cve/CVE-2016-2089/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2116 page", "url": "https://www.suse.com/security/cve/CVE-2016-2116/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8654 page", "url": "https://www.suse.com/security/cve/CVE-2016-8654/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8690 page", "url": "https://www.suse.com/security/cve/CVE-2016-8690/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8691 page", "url": "https://www.suse.com/security/cve/CVE-2016-8691/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8692 page", "url": "https://www.suse.com/security/cve/CVE-2016-8692/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8693 page", "url": "https://www.suse.com/security/cve/CVE-2016-8693/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8880 page", "url": "https://www.suse.com/security/cve/CVE-2016-8880/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8881 page", "url": "https://www.suse.com/security/cve/CVE-2016-8881/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8882 page", "url": "https://www.suse.com/security/cve/CVE-2016-8882/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8883 page", "url": "https://www.suse.com/security/cve/CVE-2016-8883/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8884 page", "url": "https://www.suse.com/security/cve/CVE-2016-8884/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8885 page", "url": "https://www.suse.com/security/cve/CVE-2016-8885/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8886 page", "url": "https://www.suse.com/security/cve/CVE-2016-8886/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8887 page", "url": "https://www.suse.com/security/cve/CVE-2016-8887/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9395 page", "url": "https://www.suse.com/security/cve/CVE-2016-9395/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9398 page", "url": "https://www.suse.com/security/cve/CVE-2016-9398/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9560 page", "url": "https://www.suse.com/security/cve/CVE-2016-9560/" } ], "title": "jasper-1.900.14-3.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10281-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-3.1.aarch64", "product": { "name": "jasper-1.900.14-3.1.aarch64", "product_id": "jasper-1.900.14-3.1.aarch64" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-3.1.aarch64", "product": { "name": "libjasper-devel-1.900.14-3.1.aarch64", "product_id": "libjasper-devel-1.900.14-3.1.aarch64" } }, { "category": "product_version", "name": "libjasper1-1.900.14-3.1.aarch64", "product": { "name": "libjasper1-1.900.14-3.1.aarch64", "product_id": "libjasper1-1.900.14-3.1.aarch64" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-3.1.aarch64", "product": { "name": "libjasper1-32bit-1.900.14-3.1.aarch64", "product_id": "libjasper1-32bit-1.900.14-3.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-3.1.ppc64le", "product": { "name": "jasper-1.900.14-3.1.ppc64le", "product_id": "jasper-1.900.14-3.1.ppc64le" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-3.1.ppc64le", "product": { "name": "libjasper-devel-1.900.14-3.1.ppc64le", "product_id": "libjasper-devel-1.900.14-3.1.ppc64le" } }, { "category": "product_version", "name": "libjasper1-1.900.14-3.1.ppc64le", "product": { "name": "libjasper1-1.900.14-3.1.ppc64le", "product_id": "libjasper1-1.900.14-3.1.ppc64le" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-3.1.ppc64le", "product": { "name": "libjasper1-32bit-1.900.14-3.1.ppc64le", "product_id": "libjasper1-32bit-1.900.14-3.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-3.1.s390x", "product": { "name": "jasper-1.900.14-3.1.s390x", "product_id": "jasper-1.900.14-3.1.s390x" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-3.1.s390x", "product": { "name": "libjasper-devel-1.900.14-3.1.s390x", "product_id": "libjasper-devel-1.900.14-3.1.s390x" } }, { "category": "product_version", "name": "libjasper1-1.900.14-3.1.s390x", "product": { "name": "libjasper1-1.900.14-3.1.s390x", "product_id": "libjasper1-1.900.14-3.1.s390x" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-3.1.s390x", "product": { "name": "libjasper1-32bit-1.900.14-3.1.s390x", "product_id": "libjasper1-32bit-1.900.14-3.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-3.1.x86_64", "product": { "name": "jasper-1.900.14-3.1.x86_64", "product_id": "jasper-1.900.14-3.1.x86_64" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-3.1.x86_64", "product": { "name": "libjasper-devel-1.900.14-3.1.x86_64", "product_id": "libjasper-devel-1.900.14-3.1.x86_64" } }, { "category": "product_version", "name": "libjasper1-1.900.14-3.1.x86_64", "product": { "name": "libjasper1-1.900.14-3.1.x86_64", "product_id": "libjasper1-1.900.14-3.1.x86_64" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-3.1.x86_64", "product": { "name": "libjasper1-32bit-1.900.14-3.1.x86_64", "product_id": "libjasper1-32bit-1.900.14-3.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jasper-1.900.14-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64" }, "product_reference": "jasper-1.900.14-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-1.900.14-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le" }, "product_reference": "jasper-1.900.14-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-1.900.14-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x" }, "product_reference": "jasper-1.900.14-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-1.900.14-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64" }, "product_reference": "jasper-1.900.14-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64" }, "product_reference": "libjasper-devel-1.900.14-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le" }, "product_reference": "libjasper-devel-1.900.14-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x" }, "product_reference": "libjasper-devel-1.900.14-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64" }, "product_reference": "libjasper-devel-1.900.14-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64" }, "product_reference": "libjasper1-1.900.14-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le" }, "product_reference": "libjasper1-1.900.14-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x" }, "product_reference": "libjasper1-1.900.14-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64" }, "product_reference": "libjasper1-1.900.14-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64" }, "product_reference": "libjasper1-32bit-1.900.14-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le" }, "product_reference": "libjasper1-32bit-1.900.14-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x" }, "product_reference": "libjasper1-32bit-1.900.14-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2008-3522", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2008-3522" } ], "notes": [ { "category": "general", "text": "Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2008-3522", "url": "https://www.suse.com/security/cve/CVE-2008-3522" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2008-3522", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 392410 for CVE-2008-3522", "url": "https://bugzilla.suse.com/392410" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "critical" } ], "title": "CVE-2008-3522" }, { "cve": "CVE-2011-4516", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-4516" } ], "notes": [ { "category": "general", "text": "Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-4516", "url": "https://www.suse.com/security/cve/CVE-2011-4516" }, { "category": "external", "summary": "SUSE Bug 1006591 for CVE-2011-4516", "url": "https://bugzilla.suse.com/1006591" }, { "category": "external", "summary": "SUSE Bug 725758 for CVE-2011-4516", "url": "https://bugzilla.suse.com/725758" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-4516" }, { "cve": "CVE-2011-4517", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-4517" } ], "notes": [ { "category": "general", "text": "The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-4517", "url": "https://www.suse.com/security/cve/CVE-2011-4517" }, { "category": "external", "summary": "SUSE Bug 1006593 for CVE-2011-4517", "url": "https://bugzilla.suse.com/1006593" }, { "category": "external", "summary": "SUSE Bug 725758 for CVE-2011-4517", "url": "https://bugzilla.suse.com/725758" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-4517" }, { "cve": "CVE-2014-8137", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8137" } ], "notes": [ { "category": "general", "text": "Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8137", "url": "https://www.suse.com/security/cve/CVE-2014-8137" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2014-8137", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 909474 for CVE-2014-8137", "url": "https://bugzilla.suse.com/909474" }, { "category": "external", "summary": "SUSE Bug 909475 for CVE-2014-8137", "url": "https://bugzilla.suse.com/909475" }, { "category": "external", "summary": "SUSE Bug 911837 for CVE-2014-8137", "url": "https://bugzilla.suse.com/911837" }, { "category": "external", "summary": "SUSE Bug 968373 for CVE-2014-8137", "url": "https://bugzilla.suse.com/968373" }, { "category": "external", "summary": "SUSE Bug 969776 for CVE-2014-8137", "url": "https://bugzilla.suse.com/969776" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-8137" }, { "cve": "CVE-2014-8138", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8138" } ], "notes": [ { "category": "general", "text": "Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8138", "url": "https://www.suse.com/security/cve/CVE-2014-8138" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2014-8138", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 909474 for CVE-2014-8138", "url": "https://bugzilla.suse.com/909474" }, { "category": "external", "summary": "SUSE Bug 909475 for CVE-2014-8138", "url": "https://bugzilla.suse.com/909475" }, { "category": "external", "summary": "SUSE Bug 911837 for CVE-2014-8138", "url": "https://bugzilla.suse.com/911837" }, { "category": "external", "summary": "SUSE Bug 969776 for CVE-2014-8138", "url": "https://bugzilla.suse.com/969776" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-8138" }, { "cve": "CVE-2014-8157", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8157" } ], "notes": [ { "category": "general", "text": "Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8157", "url": "https://www.suse.com/security/cve/CVE-2014-8157" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2014-8157", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 911837 for CVE-2014-8157", "url": "https://bugzilla.suse.com/911837" }, { "category": "external", "summary": "SUSE Bug 969776 for CVE-2014-8157", "url": "https://bugzilla.suse.com/969776" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-8157" }, { "cve": "CVE-2014-8158", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8158" } ], "notes": [ { "category": "general", "text": "Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8158", "url": "https://www.suse.com/security/cve/CVE-2014-8158" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2014-8158", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 911837 for CVE-2014-8158", "url": "https://bugzilla.suse.com/911837" }, { "category": "external", "summary": "SUSE Bug 969776 for CVE-2014-8158", "url": "https://bugzilla.suse.com/969776" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-8158" }, { "cve": "CVE-2014-9029", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-9029" } ], "notes": [ { "category": "general", "text": "Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-9029", "url": "https://www.suse.com/security/cve/CVE-2014-9029" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2014-9029", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 906364 for CVE-2014-9029", "url": "https://bugzilla.suse.com/906364" }, { "category": "external", "summary": "SUSE Bug 909474 for CVE-2014-9029", "url": "https://bugzilla.suse.com/909474" }, { "category": "external", "summary": "SUSE Bug 992991 for CVE-2014-9029", "url": "https://bugzilla.suse.com/992991" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-9029" }, { "cve": "CVE-2015-5203", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-5203" } ], "notes": [ { "category": "general", "text": "Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-5203", "url": "https://www.suse.com/security/cve/CVE-2015-5203" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2015-5203", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 941919 for CVE-2015-5203", "url": "https://bugzilla.suse.com/941919" }, { "category": "external", "summary": "SUSE Bug 942553 for CVE-2015-5203", "url": "https://bugzilla.suse.com/942553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2015-5203" }, { "cve": "CVE-2015-5221", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-5221" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-5221", "url": "https://www.suse.com/security/cve/CVE-2015-5221" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2015-5221", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 942553 for CVE-2015-5221", "url": "https://bugzilla.suse.com/942553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2015-5221" }, { "cve": "CVE-2016-1577", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-1577" } ], "notes": [ { "category": "general", "text": "Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-1577", "url": "https://www.suse.com/security/cve/CVE-2016-1577" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-1577", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 968373 for CVE-2016-1577", "url": "https://bugzilla.suse.com/968373" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2016-1577" }, { "cve": "CVE-2016-1867", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-1867" } ], "notes": [ { "category": "general", "text": "The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-1867", "url": "https://www.suse.com/security/cve/CVE-2016-1867" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-1867", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 961886 for CVE-2016-1867", "url": "https://bugzilla.suse.com/961886" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-1867" }, { "cve": "CVE-2016-2089", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-2089" } ], "notes": [ { "category": "general", "text": "The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-2089", "url": "https://www.suse.com/security/cve/CVE-2016-2089" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-2089", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 963983 for CVE-2016-2089", "url": "https://bugzilla.suse.com/963983" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-2089" }, { "cve": "CVE-2016-2116", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-2116" } ], "notes": [ { "category": "general", "text": "Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-2116", "url": "https://www.suse.com/security/cve/CVE-2016-2116" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-2116", "url": "https://bugzilla.suse.com/1178702" }, { "category": "external", "summary": "SUSE Bug 968373 for CVE-2016-2116", "url": "https://bugzilla.suse.com/968373" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2016-2116" }, { "cve": "CVE-2016-8654", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8654" } ], "notes": [ { "category": "general", "text": "A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8654", "url": "https://www.suse.com/security/cve/CVE-2016-8654" }, { "category": "external", "summary": "SUSE Bug 1012530 for CVE-2016-8654", "url": "https://bugzilla.suse.com/1012530" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8654", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2016-8654" }, { "cve": "CVE-2016-8690", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8690" } ], "notes": [ { "category": "general", "text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8690", "url": "https://www.suse.com/security/cve/CVE-2016-8690" }, { "category": "external", "summary": "SUSE Bug 1005084 for CVE-2016-8690", "url": "https://bugzilla.suse.com/1005084" }, { "category": "external", "summary": "SUSE Bug 1007009 for CVE-2016-8690", "url": "https://bugzilla.suse.com/1007009" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8690", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-8690" }, { "cve": "CVE-2016-8691", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8691" } ], "notes": [ { "category": "general", "text": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8691", "url": "https://www.suse.com/security/cve/CVE-2016-8691" }, { "category": "external", "summary": "SUSE Bug 1005090 for CVE-2016-8691", "url": "https://bugzilla.suse.com/1005090" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8691", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-8691" }, { "cve": "CVE-2016-8692", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8692" } ], "notes": [ { "category": "general", "text": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8692", "url": "https://www.suse.com/security/cve/CVE-2016-8692" }, { "category": "external", "summary": "SUSE Bug 1005090 for CVE-2016-8692", "url": "https://bugzilla.suse.com/1005090" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8692", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-8692" }, { "cve": "CVE-2016-8693", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8693" } ], "notes": [ { "category": "general", "text": "Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8693", "url": "https://www.suse.com/security/cve/CVE-2016-8693" }, { "category": "external", "summary": "SUSE Bug 1005242 for CVE-2016-8693", "url": "https://bugzilla.suse.com/1005242" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8693", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2016-8693" }, { "cve": "CVE-2016-8880", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8880" } ], "notes": [ { "category": "general", "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8880", "url": "https://www.suse.com/security/cve/CVE-2016-8880" }, { "category": "external", "summary": "SUSE Bug 1006591 for CVE-2016-8880", "url": "https://bugzilla.suse.com/1006591" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8880", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-8880" }, { "cve": "CVE-2016-8881", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8881" } ], "notes": [ { "category": "general", "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4517. Reason: This candidate is a duplicate of CVE-2011-4517. Notes: All CVE users should reference CVE-2011-4517 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8881", "url": "https://www.suse.com/security/cve/CVE-2016-8881" }, { "category": "external", "summary": "SUSE Bug 1006593 for CVE-2016-8881", "url": "https://bugzilla.suse.com/1006593" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8881", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-8881" }, { "cve": "CVE-2016-8882", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8882" } ], "notes": [ { "category": "general", "text": "The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8882", "url": "https://www.suse.com/security/cve/CVE-2016-8882" }, { "category": "external", "summary": "SUSE Bug 1006597 for CVE-2016-8882", "url": "https://bugzilla.suse.com/1006597" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8882", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-8882" }, { "cve": "CVE-2016-8883", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8883" } ], "notes": [ { "category": "general", "text": "The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8883", "url": "https://www.suse.com/security/cve/CVE-2016-8883" }, { "category": "external", "summary": "SUSE Bug 1006598 for CVE-2016-8883", "url": "https://bugzilla.suse.com/1006598" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8883", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-8883" }, { "cve": "CVE-2016-8884", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8884" } ], "notes": [ { "category": "general", "text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8884", "url": "https://www.suse.com/security/cve/CVE-2016-8884" }, { "category": "external", "summary": "SUSE Bug 1005084 for CVE-2016-8884", "url": "https://bugzilla.suse.com/1005084" }, { "category": "external", "summary": "SUSE Bug 1007009 for CVE-2016-8884", "url": "https://bugzilla.suse.com/1007009" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8884", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2016-8884" }, { "cve": "CVE-2016-8885", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8885" } ], "notes": [ { "category": "general", "text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8885", "url": "https://www.suse.com/security/cve/CVE-2016-8885" }, { "category": "external", "summary": "SUSE Bug 1005084 for CVE-2016-8885", "url": "https://bugzilla.suse.com/1005084" }, { "category": "external", "summary": "SUSE Bug 1007009 for CVE-2016-8885", "url": "https://bugzilla.suse.com/1007009" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8885", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2016-8885" }, { "cve": "CVE-2016-8886", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8886" } ], "notes": [ { "category": "general", "text": "The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8886", "url": "https://www.suse.com/security/cve/CVE-2016-8886" }, { "category": "external", "summary": "SUSE Bug 1006599 for CVE-2016-8886", "url": "https://bugzilla.suse.com/1006599" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8886", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2016-8886" }, { "cve": "CVE-2016-8887", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8887" } ], "notes": [ { "category": "general", "text": "The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8887", "url": "https://www.suse.com/security/cve/CVE-2016-8887" }, { "category": "external", "summary": "SUSE Bug 1006836 for CVE-2016-8887", "url": "https://bugzilla.suse.com/1006836" }, { "category": "external", "summary": "SUSE Bug 1006839 for CVE-2016-8887", "url": "https://bugzilla.suse.com/1006839" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8887", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2016-8887" }, { "cve": "CVE-2016-9395", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9395" } ], "notes": [ { "category": "general", "text": "The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9395", "url": "https://www.suse.com/security/cve/CVE-2016-9395" }, { "category": "external", "summary": "SUSE Bug 1010977 for CVE-2016-9395", "url": "https://bugzilla.suse.com/1010977" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9395", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9395" }, { "cve": "CVE-2016-9398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9398" } ], "notes": [ { "category": "general", "text": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9398", "url": "https://www.suse.com/security/cve/CVE-2016-9398" }, { "category": "external", "summary": "SUSE Bug 1010979 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1010979" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-9398" }, { "cve": "CVE-2016-9560", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9560" } ], "notes": [ { "category": "general", "text": "Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9560", "url": "https://www.suse.com/security/cve/CVE-2016-9560" }, { "category": "external", "summary": "SUSE Bug 1011830 for CVE-2016-9560", "url": "https://bugzilla.suse.com/1011830" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9560", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:jasper-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:jasper-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:jasper-1.900.14-3.1.s390x", "openSUSE Tumbleweed:jasper-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper-devel-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-1.900.14-3.1.x86_64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.aarch64", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.ppc64le", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.s390x", "openSUSE Tumbleweed:libjasper1-32bit-1.900.14-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2016-9560" } ] }
ghsa-98gc-chhf-m9gv
Vulnerability from github
Published
2022-05-13 01:11
Modified
2025-04-20 03:34
Severity ?
VLAI Severity ?
Details
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
{ "affected": [], "aliases": [ "CVE-2016-9398" ], "database_specific": { "cwe_ids": [ "CWE-617" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-03-23T18:59:00Z", "severity": "HIGH" }, "details": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "id": "GHSA-98gc-chhf-m9gv", "modified": "2025-04-20T03:34:44Z", "published": "2022-05-13T01:11:42Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9398" }, { "type": "WEB", "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/94382" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
suse-su-2017:0946-1
Vulnerability from csaf_suse
Published
2017-04-05 13:26
Modified
2017-04-05 13:26
Summary
Security update for jasper
Notes
Title of the patch
Security update for jasper
Description of the patch
This update for jasper fixes the following issues:
Security issues fixed:
- CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec (bsc#1012530)
- CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment (bsc#1010977).
- CVE-2016-9398: jpc_math.c:94: int jpc_floorlog2(int): Assertion 'x > 0' failed. (bsc#1010979)
- CVE-2016-9560: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (bsc#1011830)
- CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400)
- CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy (bsc#1015993)
- CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088)
- CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497)
- CVE-2017-5498: left-shift undefined behaviour (bsc#1020353)
- CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868)
Patchnames
sdksp4-jasper-13051,slessp4-jasper-13051
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jasper", "title": "Title of the patch" }, { "category": "description", "text": "\nThis update for jasper fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec (bsc#1012530)\n- CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment (bsc#1010977).\n- CVE-2016-9398: jpc_math.c:94: int jpc_floorlog2(int): Assertion \u0027x \u003e 0\u0027 failed. (bsc#1010979)\n- CVE-2016-9560: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (bsc#1011830)\n- CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400)\n- CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy (bsc#1015993)\n- CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088)\n- CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497)\n- CVE-2017-5498: left-shift undefined behaviour (bsc#1020353)\n- CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868)\n", "title": "Description of the patch" }, { "category": "details", "text": "sdksp4-jasper-13051,slessp4-jasper-13051", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0946-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2017:0946-1", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170946-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2017:0946-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002785.html" }, { "category": "self", "summary": "SUSE Bug 1010977", "url": "https://bugzilla.suse.com/1010977" }, { "category": "self", "summary": "SUSE Bug 1010979", "url": "https://bugzilla.suse.com/1010979" }, { "category": "self", "summary": "SUSE Bug 1011830", "url": "https://bugzilla.suse.com/1011830" }, { "category": "self", "summary": "SUSE Bug 1012530", "url": "https://bugzilla.suse.com/1012530" }, { "category": "self", "summary": "SUSE Bug 1015400", "url": "https://bugzilla.suse.com/1015400" }, { "category": "self", "summary": "SUSE Bug 1015993", "url": "https://bugzilla.suse.com/1015993" }, { "category": "self", "summary": "SUSE Bug 1018088", "url": "https://bugzilla.suse.com/1018088" }, { "category": "self", "summary": "SUSE Bug 1020353", "url": "https://bugzilla.suse.com/1020353" }, { "category": "self", "summary": "SUSE Bug 1021868", "url": "https://bugzilla.suse.com/1021868" }, { "category": "self", "summary": "SUSE Bug 1029497", "url": "https://bugzilla.suse.com/1029497" }, { "category": "self", "summary": "SUSE CVE CVE-2016-10251 page", "url": "https://www.suse.com/security/cve/CVE-2016-10251/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8654 page", "url": "https://www.suse.com/security/cve/CVE-2016-8654/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9395 page", "url": "https://www.suse.com/security/cve/CVE-2016-9395/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9398 page", "url": "https://www.suse.com/security/cve/CVE-2016-9398/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9560 page", "url": "https://www.suse.com/security/cve/CVE-2016-9560/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9583 page", "url": "https://www.suse.com/security/cve/CVE-2016-9583/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9591 page", "url": "https://www.suse.com/security/cve/CVE-2016-9591/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9600 page", "url": "https://www.suse.com/security/cve/CVE-2016-9600/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5498 page", "url": "https://www.suse.com/security/cve/CVE-2017-5498/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-6850 page", "url": "https://www.suse.com/security/cve/CVE-2017-6850/" } ], "title": "Security update for jasper", "tracking": { "current_release_date": "2017-04-05T13:26:51Z", "generator": { "date": "2017-04-05T13:26:51Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2017:0946-1", "initial_release_date": "2017-04-05T13:26:51Z", "revision_history": [ { "date": "2017-04-05T13:26:51Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libjasper-devel-1.900.14-134.32.1.i586", "product": { "name": "libjasper-devel-1.900.14-134.32.1.i586", "product_id": "libjasper-devel-1.900.14-134.32.1.i586" } }, { "category": "product_version", "name": "libjasper-1.900.14-134.32.1.i586", "product": { "name": "libjasper-1.900.14-134.32.1.i586", "product_id": "libjasper-1.900.14-134.32.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "libjasper-devel-1.900.14-134.32.1.ia64", "product": { "name": "libjasper-devel-1.900.14-134.32.1.ia64", "product_id": "libjasper-devel-1.900.14-134.32.1.ia64" } }, { "category": "product_version", "name": "libjasper-1.900.14-134.32.1.ia64", "product": { "name": "libjasper-1.900.14-134.32.1.ia64", "product_id": "libjasper-1.900.14-134.32.1.ia64" } }, { "category": "product_version", "name": "libjasper-x86-1.900.14-134.32.1.ia64", "product": { "name": "libjasper-x86-1.900.14-134.32.1.ia64", "product_id": "libjasper-x86-1.900.14-134.32.1.ia64" } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "libjasper-devel-1.900.14-134.32.1.ppc64", "product": { "name": "libjasper-devel-1.900.14-134.32.1.ppc64", "product_id": "libjasper-devel-1.900.14-134.32.1.ppc64" } }, { "category": "product_version", "name": "libjasper-1.900.14-134.32.1.ppc64", "product": { "name": "libjasper-1.900.14-134.32.1.ppc64", "product_id": "libjasper-1.900.14-134.32.1.ppc64" } }, { "category": "product_version", "name": "libjasper-32bit-1.900.14-134.32.1.ppc64", "product": { "name": "libjasper-32bit-1.900.14-134.32.1.ppc64", "product_id": "libjasper-32bit-1.900.14-134.32.1.ppc64" } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "libjasper-devel-1.900.14-134.32.1.s390x", "product": { "name": "libjasper-devel-1.900.14-134.32.1.s390x", "product_id": "libjasper-devel-1.900.14-134.32.1.s390x" } }, { "category": "product_version", "name": "libjasper-1.900.14-134.32.1.s390x", "product": { "name": "libjasper-1.900.14-134.32.1.s390x", "product_id": "libjasper-1.900.14-134.32.1.s390x" } }, { "category": "product_version", "name": "libjasper-32bit-1.900.14-134.32.1.s390x", "product": { "name": "libjasper-32bit-1.900.14-134.32.1.s390x", "product_id": "libjasper-32bit-1.900.14-134.32.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libjasper-devel-1.900.14-134.32.1.x86_64", "product": { "name": "libjasper-devel-1.900.14-134.32.1.x86_64", "product_id": "libjasper-devel-1.900.14-134.32.1.x86_64" } }, { "category": "product_version", "name": "libjasper-1.900.14-134.32.1.x86_64", "product": { "name": "libjasper-1.900.14-134.32.1.x86_64", "product_id": "libjasper-1.900.14-134.32.1.x86_64" } }, { "category": "product_version", "name": "libjasper-32bit-1.900.14-134.32.1.x86_64", "product": { "name": "libjasper-32bit-1.900.14-134.32.1.x86_64", "product_id": "libjasper-32bit-1.900.14-134.32.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 11 SP4", "product": { "name": "SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4", "product_identification_helper": { "cpe": "cpe:/a:suse:sle-sdk:11:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 11 SP4", "product": { "name": "SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_sles:11:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:11:sp4" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-134.32.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586" }, "product_reference": "libjasper-devel-1.900.14-134.32.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-134.32.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64" }, "product_reference": "libjasper-devel-1.900.14-134.32.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-134.32.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64" }, "product_reference": "libjasper-devel-1.900.14-134.32.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-134.32.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x" }, "product_reference": "libjasper-devel-1.900.14-134.32.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-134.32.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" }, "product_reference": "libjasper-devel-1.900.14-134.32.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586" }, "product_reference": "libjasper-1.900.14-134.32.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64" }, "product_reference": "libjasper-1.900.14-134.32.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64" }, "product_reference": "libjasper-1.900.14-134.32.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x" }, "product_reference": "libjasper-1.900.14-134.32.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64" }, "product_reference": "libjasper-1.900.14-134.32.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-32bit-1.900.14-134.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64" }, "product_reference": "libjasper-32bit-1.900.14-134.32.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-32bit-1.900.14-134.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x" }, "product_reference": "libjasper-32bit-1.900.14-134.32.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-32bit-1.900.14-134.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64" }, "product_reference": "libjasper-32bit-1.900.14-134.32.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-x86-1.900.14-134.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64" }, "product_reference": "libjasper-x86-1.900.14-134.32.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586" }, "product_reference": "libjasper-1.900.14-134.32.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64" }, "product_reference": "libjasper-1.900.14-134.32.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64" }, "product_reference": "libjasper-1.900.14-134.32.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x" }, "product_reference": "libjasper-1.900.14-134.32.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-1.900.14-134.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64" }, "product_reference": "libjasper-1.900.14-134.32.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-32bit-1.900.14-134.32.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64" }, "product_reference": "libjasper-32bit-1.900.14-134.32.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-32bit-1.900.14-134.32.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x" }, "product_reference": "libjasper-32bit-1.900.14-134.32.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-32bit-1.900.14-134.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64" }, "product_reference": "libjasper-32bit-1.900.14-134.32.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-x86-1.900.14-134.32.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64" }, "product_reference": "libjasper-x86-1.900.14-134.32.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-10251", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-10251" } ], "notes": [ { "category": "general", "text": "Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-10251", "url": "https://www.suse.com/security/cve/CVE-2016-10251" }, { "category": "external", "summary": "SUSE Bug 1029497 for CVE-2016-10251", "url": "https://bugzilla.suse.com/1029497" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-10251", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "moderate" } ], "title": "CVE-2016-10251" }, { "cve": "CVE-2016-8654", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8654" } ], "notes": [ { "category": "general", "text": "A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8654", "url": "https://www.suse.com/security/cve/CVE-2016-8654" }, { "category": "external", "summary": "SUSE Bug 1012530 for CVE-2016-8654", "url": "https://bugzilla.suse.com/1012530" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8654", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "important" } ], "title": "CVE-2016-8654" }, { "cve": "CVE-2016-9395", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9395" } ], "notes": [ { "category": "general", "text": "The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9395", "url": "https://www.suse.com/security/cve/CVE-2016-9395" }, { "category": "external", "summary": "SUSE Bug 1010977 for CVE-2016-9395", "url": "https://bugzilla.suse.com/1010977" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9395", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "moderate" } ], "title": "CVE-2016-9395" }, { "cve": "CVE-2016-9398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9398" } ], "notes": [ { "category": "general", "text": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9398", "url": "https://www.suse.com/security/cve/CVE-2016-9398" }, { "category": "external", "summary": "SUSE Bug 1010979 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1010979" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "moderate" } ], "title": "CVE-2016-9398" }, { "cve": "CVE-2016-9560", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9560" } ], "notes": [ { "category": "general", "text": "Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9560", "url": "https://www.suse.com/security/cve/CVE-2016-9560" }, { "category": "external", "summary": "SUSE Bug 1011830 for CVE-2016-9560", "url": "https://bugzilla.suse.com/1011830" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9560", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "important" } ], "title": "CVE-2016-9560" }, { "cve": "CVE-2016-9583", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9583" } ], "notes": [ { "category": "general", "text": "An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9583", "url": "https://www.suse.com/security/cve/CVE-2016-9583" }, { "category": "external", "summary": "SUSE Bug 1015400 for CVE-2016-9583", "url": "https://bugzilla.suse.com/1015400" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9583", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "moderate" } ], "title": "CVE-2016-9583" }, { "cve": "CVE-2016-9591", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9591" } ], "notes": [ { "category": "general", "text": "JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9591", "url": "https://www.suse.com/security/cve/CVE-2016-9591" }, { "category": "external", "summary": "SUSE Bug 1015993 for CVE-2016-9591", "url": "https://bugzilla.suse.com/1015993" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9591", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "moderate" } ], "title": "CVE-2016-9591" }, { "cve": "CVE-2016-9600", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9600" } ], "notes": [ { "category": "general", "text": "JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9600", "url": "https://www.suse.com/security/cve/CVE-2016-9600" }, { "category": "external", "summary": "SUSE Bug 1018088 for CVE-2016-9600", "url": "https://bugzilla.suse.com/1018088" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9600", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "moderate" } ], "title": "CVE-2016-9600" }, { "cve": "CVE-2017-5498", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5498" } ], "notes": [ { "category": "general", "text": "libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5498", "url": "https://www.suse.com/security/cve/CVE-2017-5498" }, { "category": "external", "summary": "SUSE Bug 1020353 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020353" }, { "category": "external", "summary": "SUSE Bug 1020451 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020451" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5498", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "low" } ], "title": "CVE-2017-5498" }, { "cve": "CVE-2017-6850", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-6850" } ], "notes": [ { "category": "general", "text": "The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-6850", "url": "https://www.suse.com/security/cve/CVE-2017-6850" }, { "category": "external", "summary": "SUSE Bug 1021868 for CVE-2017-6850", "url": "https://bugzilla.suse.com/1021868" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-6850", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-32bit-1.900.14-134.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libjasper-x86-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:libjasper-devel-1.900.14-134.32.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-05T13:26:51Z", "details": "low" } ], "title": "CVE-2017-6850" } ] }
suse-su-2020:2690-1
Vulnerability from csaf_suse
Published
2020-09-21 08:57
Modified
2020-09-21 08:57
Summary
Security update for jasper
Notes
Title of the patch
Security update for jasper
Description of the patch
This update for jasper fixes the following issues:
- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).
- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).
- CVE-2016-9397: Fix assert in jpc_dequantize (bsc#1010786).
- CVE-2016-9557: Fix signed integer overflow (bsc#1011829).
- CVE-2017-5499: Validate component depth bit (bsc#1020451).
- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).
- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).
- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).
- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).
- CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115).
- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).
- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).
- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).
- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).
- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).
- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).
Patchnames
SUSE-2020-2690,SUSE-SLE-SDK-12-SP5-2020-2690,SUSE-SLE-SERVER-12-SP5-2020-2690
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jasper", "title": "Title of the patch" }, { "category": "description", "text": "This update for jasper fixes the following issues:\n\n- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).\n- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).\n- CVE-2016-9397: Fix assert in jpc_dequantize (bsc#1010786).\n- CVE-2016-9557: Fix signed integer overflow (bsc#1011829).\n- CVE-2017-5499: Validate component depth bit (bsc#1020451).\n- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).\n- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).\n- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).\n- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).\n- CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115).\n- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).\n- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).\n- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).\n- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).\n- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).\n- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2020-2690,SUSE-SLE-SDK-12-SP5-2020-2690,SUSE-SLE-SERVER-12-SP5-2020-2690", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2690-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2020:2690-1", "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202690-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2020:2690-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" }, { "category": "self", "summary": "SUSE Bug 1010786", "url": "https://bugzilla.suse.com/1010786" }, { "category": "self", "summary": "SUSE Bug 1010979", "url": "https://bugzilla.suse.com/1010979" }, { "category": "self", "summary": "SUSE Bug 1010980", "url": "https://bugzilla.suse.com/1010980" }, { "category": "self", "summary": "SUSE Bug 1011829", "url": "https://bugzilla.suse.com/1011829" }, { "category": "self", "summary": "SUSE Bug 1020451", "url": "https://bugzilla.suse.com/1020451" }, { "category": "self", "summary": "SUSE Bug 1020456", "url": "https://bugzilla.suse.com/1020456" }, { "category": "self", "summary": "SUSE Bug 1020458", "url": "https://bugzilla.suse.com/1020458" }, { "category": "self", "summary": "SUSE Bug 1020460", "url": "https://bugzilla.suse.com/1020460" }, { "category": "self", "summary": "SUSE Bug 1045450", "url": "https://bugzilla.suse.com/1045450" }, { "category": "self", "summary": "SUSE Bug 1057152", "url": "https://bugzilla.suse.com/1057152" }, { "category": "self", "summary": "SUSE Bug 1088278", "url": "https://bugzilla.suse.com/1088278" }, { "category": "self", "summary": "SUSE Bug 1092115", "url": "https://bugzilla.suse.com/1092115" }, { "category": "self", "summary": "SUSE Bug 1114498", "url": "https://bugzilla.suse.com/1114498" }, { "category": "self", "summary": "SUSE Bug 1115637", "url": "https://bugzilla.suse.com/1115637" }, { "category": "self", "summary": "SUSE Bug 1117328", "url": "https://bugzilla.suse.com/1117328" }, { "category": "self", "summary": "SUSE Bug 1120805", "url": "https://bugzilla.suse.com/1120805" }, { "category": "self", "summary": "SUSE Bug 1120807", "url": "https://bugzilla.suse.com/1120807" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9397 page", "url": "https://www.suse.com/security/cve/CVE-2016-9397/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9398 page", "url": "https://www.suse.com/security/cve/CVE-2016-9398/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9399 page", "url": "https://www.suse.com/security/cve/CVE-2016-9399/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9557 page", "url": "https://www.suse.com/security/cve/CVE-2016-9557/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-14132 page", "url": "https://www.suse.com/security/cve/CVE-2017-14132/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5499 page", "url": "https://www.suse.com/security/cve/CVE-2017-5499/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5503 page", "url": "https://www.suse.com/security/cve/CVE-2017-5503/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5504 page", "url": "https://www.suse.com/security/cve/CVE-2017-5504/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5505 page", "url": "https://www.suse.com/security/cve/CVE-2017-5505/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-9782 page", "url": "https://www.suse.com/security/cve/CVE-2017-9782/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-18873 page", "url": "https://www.suse.com/security/cve/CVE-2018-18873/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19139 page", "url": "https://www.suse.com/security/cve/CVE-2018-19139/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19543 page", "url": "https://www.suse.com/security/cve/CVE-2018-19543/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20570 page", "url": "https://www.suse.com/security/cve/CVE-2018-20570/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20622 page", "url": "https://www.suse.com/security/cve/CVE-2018-20622/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9154 page", "url": "https://www.suse.com/security/cve/CVE-2018-9154/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9252 page", "url": "https://www.suse.com/security/cve/CVE-2018-9252/" } ], "title": "Security update for jasper", "tracking": { "current_release_date": "2020-09-21T08:57:10Z", "generator": { "date": "2020-09-21T08:57:10Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2020:2690-1", "initial_release_date": "2020-09-21T08:57:10Z", "revision_history": [ { "date": "2020-09-21T08:57:10Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-195.22.1.aarch64", "product": { "name": "jasper-1.900.14-195.22.1.aarch64", "product_id": "jasper-1.900.14-195.22.1.aarch64" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-195.22.1.aarch64", "product": { "name": "libjasper-devel-1.900.14-195.22.1.aarch64", "product_id": "libjasper-devel-1.900.14-195.22.1.aarch64" } }, { "category": "product_version", "name": "libjasper1-1.900.14-195.22.1.aarch64", "product": { "name": "libjasper1-1.900.14-195.22.1.aarch64", "product_id": "libjasper1-1.900.14-195.22.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libjasper1-64bit-1.900.14-195.22.1.aarch64_ilp32", "product": { "name": "libjasper1-64bit-1.900.14-195.22.1.aarch64_ilp32", "product_id": "libjasper1-64bit-1.900.14-195.22.1.aarch64_ilp32" } } ], "category": "architecture", "name": "aarch64_ilp32" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-195.22.1.i586", "product": { "name": "jasper-1.900.14-195.22.1.i586", "product_id": "jasper-1.900.14-195.22.1.i586" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-195.22.1.i586", "product": { "name": "libjasper-devel-1.900.14-195.22.1.i586", "product_id": "libjasper-devel-1.900.14-195.22.1.i586" } }, { "category": "product_version", "name": "libjasper1-1.900.14-195.22.1.i586", "product": { "name": "libjasper1-1.900.14-195.22.1.i586", "product_id": "libjasper1-1.900.14-195.22.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-195.22.1.ppc64le", "product": { "name": "jasper-1.900.14-195.22.1.ppc64le", "product_id": "jasper-1.900.14-195.22.1.ppc64le" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-195.22.1.ppc64le", "product": { "name": "libjasper-devel-1.900.14-195.22.1.ppc64le", "product_id": "libjasper-devel-1.900.14-195.22.1.ppc64le" } }, { "category": "product_version", "name": "libjasper1-1.900.14-195.22.1.ppc64le", "product": { "name": "libjasper1-1.900.14-195.22.1.ppc64le", "product_id": "libjasper1-1.900.14-195.22.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-195.22.1.s390", "product": { "name": "jasper-1.900.14-195.22.1.s390", "product_id": "jasper-1.900.14-195.22.1.s390" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-195.22.1.s390", "product": { "name": "libjasper-devel-1.900.14-195.22.1.s390", "product_id": "libjasper-devel-1.900.14-195.22.1.s390" } }, { "category": "product_version", "name": "libjasper1-1.900.14-195.22.1.s390", "product": { "name": "libjasper1-1.900.14-195.22.1.s390", "product_id": "libjasper1-1.900.14-195.22.1.s390" } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-195.22.1.s390x", "product": { "name": "jasper-1.900.14-195.22.1.s390x", "product_id": "jasper-1.900.14-195.22.1.s390x" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-195.22.1.s390x", "product": { "name": "libjasper-devel-1.900.14-195.22.1.s390x", "product_id": "libjasper-devel-1.900.14-195.22.1.s390x" } }, { "category": "product_version", "name": "libjasper1-1.900.14-195.22.1.s390x", "product": { "name": "libjasper1-1.900.14-195.22.1.s390x", "product_id": "libjasper1-1.900.14-195.22.1.s390x" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-195.22.1.s390x", "product": { "name": "libjasper1-32bit-1.900.14-195.22.1.s390x", "product_id": "libjasper1-32bit-1.900.14-195.22.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "jasper-1.900.14-195.22.1.x86_64", "product": { "name": "jasper-1.900.14-195.22.1.x86_64", "product_id": "jasper-1.900.14-195.22.1.x86_64" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-195.22.1.x86_64", "product": { "name": "libjasper-devel-1.900.14-195.22.1.x86_64", "product_id": "libjasper-devel-1.900.14-195.22.1.x86_64" } }, { "category": "product_version", "name": "libjasper1-1.900.14-195.22.1.x86_64", "product": { "name": "libjasper1-1.900.14-195.22.1.x86_64", "product_id": "libjasper1-1.900.14-195.22.1.x86_64" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-195.22.1.x86_64", "product": { "name": "libjasper1-32bit-1.900.14-195.22.1.x86_64", "product_id": "libjasper1-32bit-1.900.14-195.22.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP5", "product": { "name": "SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-195.22.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64" }, "product_reference": "libjasper-devel-1.900.14-195.22.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-195.22.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le" }, "product_reference": "libjasper-devel-1.900.14-195.22.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-195.22.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x" }, "product_reference": "libjasper-devel-1.900.14-195.22.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-195.22.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" }, "product_reference": "libjasper-devel-1.900.14-195.22.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64" }, "product_reference": "libjasper1-1.900.14-195.22.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le" }, "product_reference": "libjasper1-1.900.14-195.22.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x" }, "product_reference": "libjasper1-1.900.14-195.22.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64" }, "product_reference": "libjasper1-1.900.14-195.22.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-195.22.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x" }, "product_reference": "libjasper1-32bit-1.900.14-195.22.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-195.22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-195.22.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64" }, "product_reference": "libjasper1-1.900.14-195.22.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le" }, "product_reference": "libjasper1-1.900.14-195.22.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x" }, "product_reference": "libjasper1-1.900.14-195.22.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-195.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64" }, "product_reference": "libjasper1-1.900.14-195.22.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-195.22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x" }, "product_reference": "libjasper1-32bit-1.900.14-195.22.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-195.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-195.22.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9397", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9397" } ], "notes": [ { "category": "general", "text": "The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9397", "url": "https://www.suse.com/security/cve/CVE-2016-9397" }, { "category": "external", "summary": "SUSE Bug 1010786 for CVE-2016-9397", "url": "https://bugzilla.suse.com/1010786" }, { "category": "external", "summary": "SUSE Bug 1011829 for CVE-2016-9397", "url": "https://bugzilla.suse.com/1011829" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9397", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2016-9397" }, { "cve": "CVE-2016-9398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9398" } ], "notes": [ { "category": "general", "text": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9398", "url": "https://www.suse.com/security/cve/CVE-2016-9398" }, { "category": "external", "summary": "SUSE Bug 1010979 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1010979" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2016-9398" }, { "cve": "CVE-2016-9399", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9399" } ], "notes": [ { "category": "general", "text": "The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9399", "url": "https://www.suse.com/security/cve/CVE-2016-9399" }, { "category": "external", "summary": "SUSE Bug 1010980 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1010980" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2016-9399" }, { "cve": "CVE-2016-9557", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9557" } ], "notes": [ { "category": "general", "text": "Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9557", "url": "https://www.suse.com/security/cve/CVE-2016-9557" }, { "category": "external", "summary": "SUSE Bug 1010786 for CVE-2016-9557", "url": "https://bugzilla.suse.com/1010786" }, { "category": "external", "summary": "SUSE Bug 1011829 for CVE-2016-9557", "url": "https://bugzilla.suse.com/1011829" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9557", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2016-9557" }, { "cve": "CVE-2017-14132", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-14132" } ], "notes": [ { "category": "general", "text": "JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-14132", "url": "https://www.suse.com/security/cve/CVE-2017-14132" }, { "category": "external", "summary": "SUSE Bug 1057152 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1057152" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2017-14132" }, { "cve": "CVE-2017-5499", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5499" } ], "notes": [ { "category": "general", "text": "Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5499", "url": "https://www.suse.com/security/cve/CVE-2017-5499" }, { "category": "external", "summary": "SUSE Bug 1020451 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020451" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2017-5499" }, { "cve": "CVE-2017-5503", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5503" } ], "notes": [ { "category": "general", "text": "The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5503", "url": "https://www.suse.com/security/cve/CVE-2017-5503" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2017-5503" }, { "cve": "CVE-2017-5504", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5504" } ], "notes": [ { "category": "general", "text": "The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5504", "url": "https://www.suse.com/security/cve/CVE-2017-5504" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2017-5504" }, { "cve": "CVE-2017-5505", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5505" } ], "notes": [ { "category": "general", "text": "The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5505", "url": "https://www.suse.com/security/cve/CVE-2017-5505" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2017-5505" }, { "cve": "CVE-2017-9782", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-9782" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-9782", "url": "https://www.suse.com/security/cve/CVE-2017-9782" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2017-9782" }, { "cve": "CVE-2018-18873", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-18873" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-18873", "url": "https://www.suse.com/security/cve/CVE-2018-18873" }, { "category": "external", "summary": "SUSE Bug 1114495 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114495" }, { "category": "external", "summary": "SUSE Bug 1114498 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114498" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2018-18873" }, { "cve": "CVE-2018-19139", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19139" } ], "notes": [ { "category": "general", "text": "An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19139", "url": "https://www.suse.com/security/cve/CVE-2018-19139" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2018-19139" }, { "cve": "CVE-2018-19543", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19543" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19543", "url": "https://www.suse.com/security/cve/CVE-2018-19543" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1117507 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117507" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2018-19543" }, { "cve": "CVE-2018-20570", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20570" } ], "notes": [ { "category": "general", "text": "jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20570", "url": "https://www.suse.com/security/cve/CVE-2018-20570" }, { "category": "external", "summary": "SUSE Bug 1120807 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1120807" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2018-20570" }, { "cve": "CVE-2018-20622", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20622" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when \"--output-format jp2\" is used.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20622", "url": "https://www.suse.com/security/cve/CVE-2018-20622" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1120805 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1120805" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "moderate" } ], "title": "CVE-2018-20622" }, { "cve": "CVE-2018-9154", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9154" } ], "notes": [ { "category": "general", "text": "There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9154", "url": "https://www.suse.com/security/cve/CVE-2018-9154" }, { "category": "external", "summary": "SUSE Bug 1092115 for CVE-2018-9154", "url": "https://bugzilla.suse.com/1092115" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9154", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2018-9154" }, { "cve": "CVE-2018-9252", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9252" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9252", "url": "https://www.suse.com/security/cve/CVE-2018-9252" }, { "category": "external", "summary": "SUSE Bug 1088278 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1088278" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjasper1-32bit-1.900.14-195.22.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:libjasper-devel-1.900.14-195.22.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:57:10Z", "details": "low" } ], "title": "CVE-2018-9252" } ] }
suse-su-2020:2689-1
Vulnerability from csaf_suse
Published
2020-09-21 08:56
Modified
2020-09-21 08:56
Summary
Security update for jasper
Notes
Title of the patch
Security update for jasper
Description of the patch
This update for jasper fixes the following issues:
- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).
- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).
- CVE-2017-5499: Validate component depth bit (bsc#1020451).
- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).
- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).
- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).
- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).
- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).
- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).
- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).
- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).
- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).
- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).
Patchnames
SUSE-2020-2689,SUSE-SLE-Module-Basesystem-15-SP1-2020-2689,SUSE-SLE-Module-Basesystem-15-SP2-2020-2689,SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-2689,SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-2689,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-2689
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jasper", "title": "Title of the patch" }, { "category": "description", "text": "This update for jasper fixes the following issues:\n\n- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).\n- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).\n- CVE-2017-5499: Validate component depth bit (bsc#1020451).\n- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).\n- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).\n- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).\n- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).\n- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).\n- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).\n- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).\n- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).\n- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).\n- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2020-2689,SUSE-SLE-Module-Basesystem-15-SP1-2020-2689,SUSE-SLE-Module-Basesystem-15-SP2-2020-2689,SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-2689,SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-2689,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-2689", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2689-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2020:2689-1", "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202689-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2020:2689-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" }, { "category": "self", "summary": "SUSE Bug 1010979", "url": "https://bugzilla.suse.com/1010979" }, { "category": "self", "summary": "SUSE Bug 1010980", "url": "https://bugzilla.suse.com/1010980" }, { "category": "self", "summary": "SUSE Bug 1020451", "url": "https://bugzilla.suse.com/1020451" }, { "category": "self", "summary": "SUSE Bug 1020456", "url": "https://bugzilla.suse.com/1020456" }, { "category": "self", "summary": "SUSE Bug 1020458", "url": "https://bugzilla.suse.com/1020458" }, { "category": "self", "summary": "SUSE Bug 1020460", "url": "https://bugzilla.suse.com/1020460" }, { "category": "self", "summary": "SUSE Bug 1045450", "url": "https://bugzilla.suse.com/1045450" }, { "category": "self", "summary": "SUSE Bug 1057152", "url": "https://bugzilla.suse.com/1057152" }, { "category": "self", "summary": "SUSE Bug 1088278", "url": "https://bugzilla.suse.com/1088278" }, { "category": "self", "summary": "SUSE Bug 1114498", "url": "https://bugzilla.suse.com/1114498" }, { "category": "self", "summary": "SUSE Bug 1115637", "url": "https://bugzilla.suse.com/1115637" }, { "category": "self", "summary": "SUSE Bug 1117328", "url": "https://bugzilla.suse.com/1117328" }, { "category": "self", "summary": "SUSE Bug 1120805", "url": "https://bugzilla.suse.com/1120805" }, { "category": "self", "summary": "SUSE Bug 1120807", "url": "https://bugzilla.suse.com/1120807" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9398 page", "url": "https://www.suse.com/security/cve/CVE-2016-9398/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9399 page", "url": "https://www.suse.com/security/cve/CVE-2016-9399/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-14132 page", "url": "https://www.suse.com/security/cve/CVE-2017-14132/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5499 page", "url": "https://www.suse.com/security/cve/CVE-2017-5499/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5503 page", "url": "https://www.suse.com/security/cve/CVE-2017-5503/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5504 page", "url": "https://www.suse.com/security/cve/CVE-2017-5504/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-5505 page", "url": "https://www.suse.com/security/cve/CVE-2017-5505/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-9782 page", "url": "https://www.suse.com/security/cve/CVE-2017-9782/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-18873 page", "url": "https://www.suse.com/security/cve/CVE-2018-18873/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19139 page", "url": "https://www.suse.com/security/cve/CVE-2018-19139/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-19543 page", "url": "https://www.suse.com/security/cve/CVE-2018-19543/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20570 page", "url": "https://www.suse.com/security/cve/CVE-2018-20570/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20622 page", "url": "https://www.suse.com/security/cve/CVE-2018-20622/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-9252 page", "url": "https://www.suse.com/security/cve/CVE-2018-9252/" } ], "title": "Security update for jasper", "tracking": { "current_release_date": "2020-09-21T08:56:31Z", "generator": { "date": "2020-09-21T08:56:31Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2020:2689-1", "initial_release_date": "2020-09-21T08:56:31Z", "revision_history": [ { "date": "2020-09-21T08:56:31Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-3.16.1.aarch64", "product": { "name": "jasper-2.0.14-3.16.1.aarch64", "product_id": "jasper-2.0.14-3.16.1.aarch64" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-3.16.1.aarch64", "product": { "name": "libjasper-devel-2.0.14-3.16.1.aarch64", "product_id": "libjasper-devel-2.0.14-3.16.1.aarch64" } }, { "category": "product_version", "name": "libjasper4-2.0.14-3.16.1.aarch64", "product": { "name": "libjasper4-2.0.14-3.16.1.aarch64", "product_id": "libjasper4-2.0.14-3.16.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libjasper4-64bit-2.0.14-3.16.1.aarch64_ilp32", "product": { "name": "libjasper4-64bit-2.0.14-3.16.1.aarch64_ilp32", "product_id": "libjasper4-64bit-2.0.14-3.16.1.aarch64_ilp32" } } ], "category": "architecture", "name": "aarch64_ilp32" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-3.16.1.i586", "product": { "name": "jasper-2.0.14-3.16.1.i586", "product_id": "jasper-2.0.14-3.16.1.i586" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-3.16.1.i586", "product": { "name": "libjasper-devel-2.0.14-3.16.1.i586", "product_id": "libjasper-devel-2.0.14-3.16.1.i586" } }, { "category": "product_version", "name": "libjasper4-2.0.14-3.16.1.i586", "product": { "name": "libjasper4-2.0.14-3.16.1.i586", "product_id": "libjasper4-2.0.14-3.16.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-3.16.1.ppc64le", "product": { "name": "jasper-2.0.14-3.16.1.ppc64le", "product_id": "jasper-2.0.14-3.16.1.ppc64le" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-3.16.1.ppc64le", "product": { "name": "libjasper-devel-2.0.14-3.16.1.ppc64le", "product_id": "libjasper-devel-2.0.14-3.16.1.ppc64le" } }, { "category": "product_version", "name": "libjasper4-2.0.14-3.16.1.ppc64le", "product": { "name": "libjasper4-2.0.14-3.16.1.ppc64le", "product_id": "libjasper4-2.0.14-3.16.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-3.16.1.s390x", "product": { "name": "jasper-2.0.14-3.16.1.s390x", "product_id": "jasper-2.0.14-3.16.1.s390x" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-3.16.1.s390x", "product": { "name": "libjasper-devel-2.0.14-3.16.1.s390x", "product_id": "libjasper-devel-2.0.14-3.16.1.s390x" } }, { "category": "product_version", "name": "libjasper4-2.0.14-3.16.1.s390x", "product": { "name": "libjasper4-2.0.14-3.16.1.s390x", "product_id": "libjasper4-2.0.14-3.16.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "jasper-2.0.14-3.16.1.x86_64", "product": { "name": "jasper-2.0.14-3.16.1.x86_64", "product_id": "jasper-2.0.14-3.16.1.x86_64" } }, { "category": "product_version", "name": "libjasper-devel-2.0.14-3.16.1.x86_64", "product": { "name": "libjasper-devel-2.0.14-3.16.1.x86_64", "product_id": "libjasper-devel-2.0.14-3.16.1.x86_64" } }, { "category": "product_version", "name": "libjasper4-2.0.14-3.16.1.x86_64", "product": { "name": "libjasper4-2.0.14-3.16.1.x86_64", "product_id": "libjasper4-2.0.14-3.16.1.x86_64" } }, { "category": "product_version", "name": "libjasper4-32bit-2.0.14-3.16.1.x86_64", "product": { "name": "libjasper4-32bit-2.0.14-3.16.1.x86_64", "product_id": "libjasper4-32bit-2.0.14-3.16.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1", "product": { "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2", "product": { "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product": { "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2", "product": { "name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Package Hub 15 SP1", "product": { "name": "SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:packagehub:15:sp1" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64" }, "product_reference": "libjasper4-2.0.14-3.16.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le" }, "product_reference": "libjasper4-2.0.14-3.16.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x" }, "product_reference": "libjasper4-2.0.14-3.16.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64" }, "product_reference": "libjasper4-2.0.14-3.16.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64" }, "product_reference": "libjasper4-2.0.14-3.16.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le" }, "product_reference": "libjasper4-2.0.14-3.16.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x" }, "product_reference": "libjasper4-2.0.14-3.16.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper4-2.0.14-3.16.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64" }, "product_reference": "libjasper4-2.0.14-3.16.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-2.0.14-3.16.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64" }, "product_reference": "libjasper-devel-2.0.14-3.16.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-3.16.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64" }, "product_reference": "jasper-2.0.14-3.16.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-3.16.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le" }, "product_reference": "jasper-2.0.14-3.16.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-3.16.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x" }, "product_reference": "jasper-2.0.14-3.16.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "jasper-2.0.14-3.16.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP1", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" }, "product_reference": "jasper-2.0.14-3.16.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9398" } ], "notes": [ { "category": "general", "text": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9398", "url": "https://www.suse.com/security/cve/CVE-2016-9398" }, { "category": "external", "summary": "SUSE Bug 1010979 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1010979" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2016-9398" }, { "cve": "CVE-2016-9399", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9399" } ], "notes": [ { "category": "general", "text": "The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9399", "url": "https://www.suse.com/security/cve/CVE-2016-9399" }, { "category": "external", "summary": "SUSE Bug 1010980 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1010980" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9399", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2016-9399" }, { "cve": "CVE-2017-14132", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-14132" } ], "notes": [ { "category": "general", "text": "JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-14132", "url": "https://www.suse.com/security/cve/CVE-2017-14132" }, { "category": "external", "summary": "SUSE Bug 1057152 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1057152" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-14132", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "low" } ], "title": "CVE-2017-14132" }, { "cve": "CVE-2017-5499", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5499" } ], "notes": [ { "category": "general", "text": "Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5499", "url": "https://www.suse.com/security/cve/CVE-2017-5499" }, { "category": "external", "summary": "SUSE Bug 1020451 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020451" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5499", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2017-5499" }, { "cve": "CVE-2017-5503", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5503" } ], "notes": [ { "category": "general", "text": "The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5503", "url": "https://www.suse.com/security/cve/CVE-2017-5503" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5503", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2017-5503" }, { "cve": "CVE-2017-5504", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5504" } ], "notes": [ { "category": "general", "text": "The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5504", "url": "https://www.suse.com/security/cve/CVE-2017-5504" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5504", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2017-5504" }, { "cve": "CVE-2017-5505", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-5505" } ], "notes": [ { "category": "general", "text": "The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-5505", "url": "https://www.suse.com/security/cve/CVE-2017-5505" }, { "category": "external", "summary": "SUSE Bug 1020456 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020456" }, { "category": "external", "summary": "SUSE Bug 1020458 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020458" }, { "category": "external", "summary": "SUSE Bug 1020460 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1020460" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-5505", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2017-5505" }, { "cve": "CVE-2017-9782", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-9782" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-9782", "url": "https://www.suse.com/security/cve/CVE-2017-9782" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2017-9782", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "low" } ], "title": "CVE-2017-9782" }, { "cve": "CVE-2018-18873", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-18873" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-18873", "url": "https://www.suse.com/security/cve/CVE-2018-18873" }, { "category": "external", "summary": "SUSE Bug 1114495 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114495" }, { "category": "external", "summary": "SUSE Bug 1114498 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1114498" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-18873", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "low" } ], "title": "CVE-2018-18873" }, { "cve": "CVE-2018-19139", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19139" } ], "notes": [ { "category": "general", "text": "An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19139", "url": "https://www.suse.com/security/cve/CVE-2018-19139" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19139", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "low" } ], "title": "CVE-2018-19139" }, { "cve": "CVE-2018-19543", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-19543" } ], "notes": [ { "category": "general", "text": "An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-19543", "url": "https://www.suse.com/security/cve/CVE-2018-19543" }, { "category": "external", "summary": "SUSE Bug 1045450 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1045450" }, { "category": "external", "summary": "SUSE Bug 1117328 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117328" }, { "category": "external", "summary": "SUSE Bug 1117507 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1117507" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-19543", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "low" } ], "title": "CVE-2018-19543" }, { "cve": "CVE-2018-20570", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20570" } ], "notes": [ { "category": "general", "text": "jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20570", "url": "https://www.suse.com/security/cve/CVE-2018-20570" }, { "category": "external", "summary": "SUSE Bug 1120807 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1120807" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20570", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2018-20570" }, { "cve": "CVE-2018-20622", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20622" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when \"--output-format jp2\" is used.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20622", "url": "https://www.suse.com/security/cve/CVE-2018-20622" }, { "category": "external", "summary": "SUSE Bug 1115637 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1115637" }, { "category": "external", "summary": "SUSE Bug 1120805 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1120805" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-20622", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "moderate" } ], "title": "CVE-2018-20622" }, { "cve": "CVE-2018-9252", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-9252" } ], "notes": [ { "category": "general", "text": "JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-9252", "url": "https://www.suse.com/security/cve/CVE-2018-9252" }, { "category": "external", "summary": "SUSE Bug 1088278 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1088278" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2018-9252", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP1:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:libjasper4-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libjasper-devel-2.0.14-3.16.1.x86_64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.aarch64", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.ppc64le", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.s390x", "SUSE Linux Enterprise Module for Package Hub 15 SP1:jasper-2.0.14-3.16.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-09-21T08:56:31Z", "details": "low" } ], "title": "CVE-2018-9252" } ] }
suse-su-2017:0084-1
Vulnerability from csaf_suse
Published
2017-01-08 12:11
Modified
2017-01-08 12:11
Summary
Security update for jasper
Notes
Title of the patch
Security update for jasper
Description of the patch
This update for jasper fixes the following issues:
- CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. (bsc#1012530)
- CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010977)
- CVE-2016-9398: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010979)
- CVE-2016-9560: Stack-based buffer overflow in jpc_tsfb_getbands2. (bsc#1011830)
- CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy. (bsc#1015993)
Patchnames
SUSE-SLE-DESKTOP-12-SP1-2017-27,SUSE-SLE-DESKTOP-12-SP2-2017-27,SUSE-SLE-RPI-12-SP2-2017-27,SUSE-SLE-SDK-12-SP1-2017-27,SUSE-SLE-SDK-12-SP2-2017-27,SUSE-SLE-SERVER-12-SP1-2017-27,SUSE-SLE-SERVER-12-SP2-2017-27
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jasper", "title": "Title of the patch" }, { "category": "description", "text": "\nThis update for jasper fixes the following issues:\n\n- CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. (bsc#1012530)\n- CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010977)\n- CVE-2016-9398: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010979)\n- CVE-2016-9560: Stack-based buffer overflow in jpc_tsfb_getbands2. (bsc#1011830)\n- CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy. (bsc#1015993)\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLE-DESKTOP-12-SP1-2017-27,SUSE-SLE-DESKTOP-12-SP2-2017-27,SUSE-SLE-RPI-12-SP2-2017-27,SUSE-SLE-SDK-12-SP1-2017-27,SUSE-SLE-SDK-12-SP2-2017-27,SUSE-SLE-SERVER-12-SP1-2017-27,SUSE-SLE-SERVER-12-SP2-2017-27", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0084-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2017:0084-1", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170084-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2017:0084-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-January/002547.html" }, { "category": "self", "summary": "SUSE Bug 1010977", "url": "https://bugzilla.suse.com/1010977" }, { "category": "self", "summary": "SUSE Bug 1010979", "url": "https://bugzilla.suse.com/1010979" }, { "category": "self", "summary": "SUSE Bug 1011830", "url": "https://bugzilla.suse.com/1011830" }, { "category": "self", "summary": "SUSE Bug 1012530", "url": "https://bugzilla.suse.com/1012530" }, { "category": "self", "summary": "SUSE Bug 1015993", "url": "https://bugzilla.suse.com/1015993" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8654 page", "url": "https://www.suse.com/security/cve/CVE-2016-8654/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9395 page", "url": "https://www.suse.com/security/cve/CVE-2016-9395/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9398 page", "url": "https://www.suse.com/security/cve/CVE-2016-9398/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9560 page", "url": "https://www.suse.com/security/cve/CVE-2016-9560/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9591 page", "url": "https://www.suse.com/security/cve/CVE-2016-9591/" } ], "title": "Security update for jasper", "tracking": { "current_release_date": "2017-01-08T12:11:28Z", "generator": { "date": "2017-01-08T12:11:28Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2017:0084-1", "initial_release_date": "2017-01-08T12:11:28Z", "revision_history": [ { "date": "2017-01-08T12:11:28Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libjasper1-1.900.14-184.1.aarch64", "product": { "name": "libjasper1-1.900.14-184.1.aarch64", "product_id": "libjasper1-1.900.14-184.1.aarch64" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-184.1.aarch64", "product": { "name": "libjasper-devel-1.900.14-184.1.aarch64", "product_id": "libjasper-devel-1.900.14-184.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libjasper-devel-1.900.14-184.1.ppc64le", "product": { "name": "libjasper-devel-1.900.14-184.1.ppc64le", "product_id": "libjasper-devel-1.900.14-184.1.ppc64le" } }, { "category": "product_version", "name": "libjasper1-1.900.14-184.1.ppc64le", "product": { "name": "libjasper1-1.900.14-184.1.ppc64le", "product_id": "libjasper1-1.900.14-184.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libjasper-devel-1.900.14-184.1.s390x", "product": { "name": "libjasper-devel-1.900.14-184.1.s390x", "product_id": "libjasper-devel-1.900.14-184.1.s390x" } }, { "category": "product_version", "name": "libjasper1-1.900.14-184.1.s390x", "product": { "name": "libjasper1-1.900.14-184.1.s390x", "product_id": "libjasper1-1.900.14-184.1.s390x" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-184.1.s390x", "product": { "name": "libjasper1-32bit-1.900.14-184.1.s390x", "product_id": "libjasper1-32bit-1.900.14-184.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libjasper1-1.900.14-184.1.x86_64", "product": { "name": "libjasper1-1.900.14-184.1.x86_64", "product_id": "libjasper1-1.900.14-184.1.x86_64" } }, { "category": "product_version", "name": "libjasper1-32bit-1.900.14-184.1.x86_64", "product": { "name": "libjasper1-32bit-1.900.14-184.1.x86_64", "product_id": "libjasper1-32bit-1.900.14-184.1.x86_64" } }, { "category": "product_version", "name": "libjasper-devel-1.900.14-184.1.x86_64", "product": { "name": "libjasper-devel-1.900.14-184.1.x86_64", "product_id": "libjasper-devel-1.900.14-184.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12 SP1", "product": { "name": "SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12 SP2", "product": { "name": "SUSE Linux Enterprise Desktop 12 SP2", "product_id": "SUSE Linux Enterprise Desktop 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product": { "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP1", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP2", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP1", "product": { "name": "SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP2", "product": { "name": "SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", "product_id": "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", "product_id": "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64" }, "product_reference": "libjasper1-1.900.14-184.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-184.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le" }, "product_reference": "libjasper-devel-1.900.14-184.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x" }, "product_reference": "libjasper-devel-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64" }, "product_reference": "libjasper-devel-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-184.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64" }, "product_reference": "libjasper-devel-1.900.14-184.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-184.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le" }, "product_reference": "libjasper-devel-1.900.14-184.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x" }, "product_reference": "libjasper-devel-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper-devel-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" }, "product_reference": "libjasper-devel-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le" }, "product_reference": "libjasper1-1.900.14-184.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le" }, "product_reference": "libjasper1-1.900.14-184.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64" }, "product_reference": "libjasper1-1.900.14-184.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le" }, "product_reference": "libjasper1-1.900.14-184.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64" }, "product_reference": "libjasper1-1.900.14-184.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le" }, "product_reference": "libjasper1-1.900.14-184.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libjasper1-32bit-1.900.14-184.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64" }, "product_reference": "libjasper1-32bit-1.900.14-184.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-8654", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8654" } ], "notes": [ { "category": "general", "text": "A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8654", "url": "https://www.suse.com/security/cve/CVE-2016-8654" }, { "category": "external", "summary": "SUSE Bug 1012530 for CVE-2016-8654", "url": "https://bugzilla.suse.com/1012530" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-8654", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-01-08T12:11:28Z", "details": "important" } ], "title": "CVE-2016-8654" }, { "cve": "CVE-2016-9395", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9395" } ], "notes": [ { "category": "general", "text": "The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9395", "url": "https://www.suse.com/security/cve/CVE-2016-9395" }, { "category": "external", "summary": "SUSE Bug 1010977 for CVE-2016-9395", "url": "https://bugzilla.suse.com/1010977" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9395", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-01-08T12:11:28Z", "details": "moderate" } ], "title": "CVE-2016-9395" }, { "cve": "CVE-2016-9398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9398" } ], "notes": [ { "category": "general", "text": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9398", "url": "https://www.suse.com/security/cve/CVE-2016-9398" }, { "category": "external", "summary": "SUSE Bug 1010979 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1010979" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9398", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-01-08T12:11:28Z", "details": "moderate" } ], "title": "CVE-2016-9398" }, { "cve": "CVE-2016-9560", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9560" } ], "notes": [ { "category": "general", "text": "Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9560", "url": "https://www.suse.com/security/cve/CVE-2016-9560" }, { "category": "external", "summary": "SUSE Bug 1011830 for CVE-2016-9560", "url": "https://bugzilla.suse.com/1011830" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9560", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-01-08T12:11:28Z", "details": "important" } ], "title": "CVE-2016-9560" }, { "cve": "CVE-2016-9591", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9591" } ], "notes": [ { "category": "general", "text": "JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9591", "url": "https://www.suse.com/security/cve/CVE-2016-9591" }, { "category": "external", "summary": "SUSE Bug 1015993 for CVE-2016-9591", "url": "https://bugzilla.suse.com/1015993" }, { "category": "external", "summary": "SUSE Bug 1178702 for CVE-2016-9591", "url": "https://bugzilla.suse.com/1178702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-184.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-184.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-01-08T12:11:28Z", "details": "moderate" } ], "title": "CVE-2016-9591" } ] }
fkie_cve-2016-9398
Vulnerability from fkie_nvd
Published
2017-03-23 18:59
Modified
2025-04-20 01:37
Severity ?
Summary
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
References
▶ | URL | Tags | |
---|---|---|---|
cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html | Mailing List, Third Party Advisory | |
cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html | Mailing List, Third Party Advisory | |
cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html | Mailing List, Third Party Advisory | |
cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html | Mailing List, Third Party Advisory | |
cve@mitre.org | http://www.openwall.com/lists/oss-security/2016/11/17/1 | Mailing List, Patch, Third Party Advisory, VDB Entry | |
cve@mitre.org | http://www.securityfocus.com/bid/94382 | Third Party Advisory, VDB Entry | |
cve@mitre.org | https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure | Patch, Third Party Advisory | |
cve@mitre.org | https://bugzilla.redhat.com/show_bug.cgi?id=1396980 | Issue Tracking, Patch, Third Party Advisory | |
cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/ | ||
cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ | ||
af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html | Mailing List, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html | Mailing List, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html | Mailing List, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html | Mailing List, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2016/11/17/1 | Mailing List, Patch, Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/94382 | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure | Patch, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=1396980 | Issue Tracking, Patch, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/ | ||
af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
jasper_project | jasper | * | |
fedoraproject | fedora | 32 | |
fedoraproject | fedora | 33 | |
opensuse | leap | 15.1 | |
opensuse | leap | 15.2 | |
opensuse | leap | 42.1 | |
opensuse | leap | 42.2 | |
suse | linux_enterprise_desktop | 12 | |
suse | linux_enterprise_desktop | 12 | |
suse | linux_enterprise_server | 12 | |
suse | linux_enterprise_server | 12 | |
suse | linux_enterprise_server | 12 | |
suse | linux_enterprise_software_development_kit | 12 | |
suse | linux_enterprise_software_development_kit | 12 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*", "matchCriteriaId": "6261556A-89A5-417D-9FD4-31A5E70D4EF3", "versionEndExcluding": "1.900.17", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", "matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956", "vulnerable": true }, { "criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493", "vulnerable": true }, { "criteria": "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*", "matchCriteriaId": "B009C22E-30A4-4288-BCF6-C3E81DEAF45A", "vulnerable": true }, { "criteria": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*", "matchCriteriaId": "4863BE36-D16A-4D75-90D9-FD76DB5B48B7", "vulnerable": true }, { "criteria": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*", "matchCriteriaId": "1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB", "vulnerable": true }, { "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*", "matchCriteriaId": "3A0BA503-3F96-48DA-AF47-FBA37A9D0C48", "vulnerable": true }, { "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*", "matchCriteriaId": "57CFAD92-EECD-417D-ADDB-8178C320B204", "vulnerable": true }, { "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*", "matchCriteriaId": "2076747F-A98E-4DD9-9B52-BF1732BCAD3D", "vulnerable": true }, { "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*", "matchCriteriaId": "F84B2729-7B52-4505-9656-1BD31B980705", "vulnerable": true }, { "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*", "matchCriteriaId": "F2681D87-58A9-4A56-BE97-B00C5061CA32", "vulnerable": true }, { "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*", "matchCriteriaId": "5A633996-2FD7-467C-BAA6-529E16BD06D1", "vulnerable": true }, { "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*", "matchCriteriaId": "5F150BD9-4B94-42D3-9E14-58665B7FF220", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors." }, { "lang": "es", "value": "La funci\u00f3n jpc_floorlog2 en jpc_math.c en JasPer en versiones anteriores a 1.900.17 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (fallo de aserci\u00f3n) a trav\u00e9s de vectores no especificados." } ], "id": "CVE-2016-9398", "lastModified": "2025-04-20T01:37:25.860", "metrics": { "cvssMetricV2": [ { "acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2017-03-23T18:59:01.020", "references": [ { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "source": "cve@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "source": "cve@mitre.org", "tags": [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ], "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/94382" }, { "source": "cve@mitre.org", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "source": "cve@mitre.org", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" }, { "source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ], "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/94382" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-617" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2016-9398
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2016-9398", "description": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "id": "GSD-2016-9398", "references": [ "https://www.suse.com/security/cve/CVE-2016-9398.html", "https://advisories.mageia.org/CVE-2016-9398.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2016-9398" ], "details": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.", "id": "GSD-2016-9398", "modified": "2023-12-13T01:21:21.504520Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-9398", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure", "refsource": "MISC", "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "name": "SUSE-SU-2017:0084", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "name": "[oss-security] 20161117 Re: jasper: multiple assertion failures", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "name": "openSUSE-SU-2017:0101", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "name": "94382", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94382" }, { "name": "openSUSE-SU-2020:1517", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "name": "openSUSE-SU-2020:1523", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "name": "FEDORA-2021-2b151590d9", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.900.17", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:12:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-9398" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-617" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980", "refsource": "CONFIRM", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1396980" }, { "name": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure", "refsource": "MISC", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure" }, { "name": "94382", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/94382" }, { "name": "[oss-security] 20161117 Re: jasper: multiple assertion failures", "refsource": "MLIST", "tags": [ "Mailing List", "Patch", "Third Party Advisory", "VDB Entry" ], "url": "http://www.openwall.com/lists/oss-security/2016/11/17/1" }, { "name": "openSUSE-SU-2017:0101", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" }, { "name": "SUSE-SU-2017:0084", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" }, { "name": "openSUSE-SU-2020:1517", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" }, { "name": "openSUSE-SU-2020:1523", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" }, { "name": "FEDORA-2021-2b151590d9", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/" }, { "name": "FEDORA-2021-0a6290f865", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": true, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2021-02-22T14:21Z", "publishedDate": "2017-03-23T18:59Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…