csaf_suse - suse-su-2016:2775-1

suse-su-2016:2775-1

Vulnerability from csaf_suse

Published

2016-11-10 17:06

Modified

2016-11-10 17:06

Summary

Security update for jasper

Notes

Title of the patch

Security update for jasper

Description of the patch

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed: - CVE-2016-8887: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (bsc#1006836) - CVE-2016-8886: memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599) - CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in bmp_getdata (incomplete fix for CVE-2016-8690) (bsc#1007009) - CVE-2016-8883: assert in jpc_dec_tiledecode() (bsc#1006598) - CVE-2016-8882: segfault / null pointer access in jpc_pi_destroy (bsc#1006597) - CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593) - CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591) - CVE-2016-8693 Double free vulnerability in mem_close (bsc#1005242) - CVE-2016-8691, CVE-2016-8692: Divide by zero in jpc_dec_process_siz (bsc#1005090) - CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084) - CVE-2016-2116: Memory leak in the jas_iccprof_createfrombuf function in JasPer allowed remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file (bsc#968373) - CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983) - CVE-2016-1867: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function (bsc#961886) - CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553). - CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919) - CVE-2008-3522: Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf (bsc#392410) - jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887) (bsc#1006839) For additional change description please have a look at the changelog.

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2016-1639,SUSE-SLE-DESKTOP-12-SP2-2016-1639,SUSE-SLE-RPI-12-SP2-2016-1639,SUSE-SLE-SDK-12-SP1-2016-1639,SUSE-SLE-SDK-12-SP2-2016-1639,SUSE-SLE-SERVER-12-SP1-2016-1639,SUSE-SLE-SERVER-12-SP2-2016-1639

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for jasper",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for jasper to version 1.900.14 fixes several issues.\n\nThese security issues were fixed:\n- CVE-2016-8887: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (bsc#1006836)\n- CVE-2016-8886: memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599)\n- CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in bmp_getdata (incomplete fix for CVE-2016-8690) (bsc#1007009)\n- CVE-2016-8883: assert in jpc_dec_tiledecode() (bsc#1006598)\n- CVE-2016-8882: segfault / null pointer access in jpc_pi_destroy (bsc#1006597)\n- CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593)\n- CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591)\n- CVE-2016-8693 Double free vulnerability in mem_close (bsc#1005242)\n- CVE-2016-8691, CVE-2016-8692: Divide by zero in jpc_dec_process_siz (bsc#1005090)\n- CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084)\n- CVE-2016-2116: Memory leak in the jas_iccprof_createfrombuf function in JasPer allowed remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file (bsc#968373) \n- CVE-2016-2089: invalid read in the JasPer\u0027s jas_matrix_clip() function (bsc#963983)\n- CVE-2016-1867: Out-of-bounds Read in the JasPer\u0027s jpc_pi_nextcprl() function (bsc#961886)\n- CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553).\n- CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919)\n- CVE-2008-3522: Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf (bsc#392410)\n- jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887) (bsc#1006839)\n\nFor additional change description please have a look at the changelog.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2016-1639,SUSE-SLE-DESKTOP-12-SP2-2016-1639,SUSE-SLE-RPI-12-SP2-2016-1639,SUSE-SLE-SDK-12-SP1-2016-1639,SUSE-SLE-SDK-12-SP2-2016-1639,SUSE-SLE-SERVER-12-SP1-2016-1639,SUSE-SLE-SERVER-12-SP2-2016-1639",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2775-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2775-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162775-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2775-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1005084",
        "url": "https://bugzilla.suse.com/1005084"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1005090",
        "url": "https://bugzilla.suse.com/1005090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1005242",
        "url": "https://bugzilla.suse.com/1005242"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1006591",
        "url": "https://bugzilla.suse.com/1006591"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1006593",
        "url": "https://bugzilla.suse.com/1006593"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1006597",
        "url": "https://bugzilla.suse.com/1006597"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1006598",
        "url": "https://bugzilla.suse.com/1006598"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1006599",
        "url": "https://bugzilla.suse.com/1006599"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1006836",
        "url": "https://bugzilla.suse.com/1006836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1006839",
        "url": "https://bugzilla.suse.com/1006839"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1007009",
        "url": "https://bugzilla.suse.com/1007009"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 392410",
        "url": "https://bugzilla.suse.com/392410"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 941919",
        "url": "https://bugzilla.suse.com/941919"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 942553",
        "url": "https://bugzilla.suse.com/942553"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 961886",
        "url": "https://bugzilla.suse.com/961886"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 963983",
        "url": "https://bugzilla.suse.com/963983"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 968373",
        "url": "https://bugzilla.suse.com/968373"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2008-3522 page",
        "url": "https://www.suse.com/security/cve/CVE-2008-3522/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8158 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8158/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5203 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5203/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5221 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5221/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1577 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1577/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1867 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1867/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2089 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2089/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2116 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8690 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8691 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8692 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8693 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8693/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8880 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8880/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8881 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8881/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8882 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8882/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8883 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8883/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8884 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8884/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8885 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8885/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8886 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8886/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8887 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8887/"
      }
    ],
    "title": "Security update for jasper",
    "tracking": {
      "current_release_date": "2016-11-10T17:06:16Z",
      "generator": {
        "date": "2016-11-10T17:06:16Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2775-1",
      "initial_release_date": "2016-11-10T17:06:16Z",
      "revision_history": [
        {
          "date": "2016-11-10T17:06:16Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libjasper1-1.900.14-181.1.aarch64",
                "product": {
                  "name": "libjasper1-1.900.14-181.1.aarch64",
                  "product_id": "libjasper1-1.900.14-181.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libjasper-devel-1.900.14-181.1.aarch64",
                "product": {
                  "name": "libjasper-devel-1.900.14-181.1.aarch64",
                  "product_id": "libjasper-devel-1.900.14-181.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libjasper-devel-1.900.14-181.1.ppc64le",
                "product": {
                  "name": "libjasper-devel-1.900.14-181.1.ppc64le",
                  "product_id": "libjasper-devel-1.900.14-181.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libjasper1-1.900.14-181.1.ppc64le",
                "product": {
                  "name": "libjasper1-1.900.14-181.1.ppc64le",
                  "product_id": "libjasper1-1.900.14-181.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libjasper-devel-1.900.14-181.1.s390x",
                "product": {
                  "name": "libjasper-devel-1.900.14-181.1.s390x",
                  "product_id": "libjasper-devel-1.900.14-181.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libjasper1-1.900.14-181.1.s390x",
                "product": {
                  "name": "libjasper1-1.900.14-181.1.s390x",
                  "product_id": "libjasper1-1.900.14-181.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libjasper1-32bit-1.900.14-181.1.s390x",
                "product": {
                  "name": "libjasper1-32bit-1.900.14-181.1.s390x",
                  "product_id": "libjasper1-32bit-1.900.14-181.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libjasper1-1.900.14-181.1.x86_64",
                "product": {
                  "name": "libjasper1-1.900.14-181.1.x86_64",
                  "product_id": "libjasper1-1.900.14-181.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libjasper1-32bit-1.900.14-181.1.x86_64",
                "product": {
                  "name": "libjasper1-32bit-1.900.14-181.1.x86_64",
                  "product_id": "libjasper1-32bit-1.900.14-181.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libjasper-devel-1.900.14-181.1.x86_64",
                "product": {
                  "name": "libjasper-devel-1.900.14-181.1.x86_64",
                  "product_id": "libjasper-devel-1.900.14-181.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper-devel-1.900.14-181.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le"
        },
        "product_reference": "libjasper-devel-1.900.14-181.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper-devel-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper-devel-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper-devel-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper-devel-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper-devel-1.900.14-181.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64"
        },
        "product_reference": "libjasper-devel-1.900.14-181.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper-devel-1.900.14-181.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le"
        },
        "product_reference": "libjasper-devel-1.900.14-181.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper-devel-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper-devel-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper-devel-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper-devel-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le"
        },
        "product_reference": "libjasper1-1.900.14-181.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le"
        },
        "product_reference": "libjasper1-1.900.14-181.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le"
        },
        "product_reference": "libjasper1-1.900.14-181.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le"
        },
        "product_reference": "libjasper1-1.900.14-181.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjasper1-32bit-1.900.14-181.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64"
        },
        "product_reference": "libjasper1-32bit-1.900.14-181.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-3522",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2008-3522"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2008-3522",
          "url": "https://www.suse.com/security/cve/CVE-2008-3522"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2008-3522",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 392410 for CVE-2008-3522",
          "url": "https://bugzilla.suse.com/392410"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2008-3522"
    },
    {
      "cve": "CVE-2014-8158",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8158"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8158",
          "url": "https://www.suse.com/security/cve/CVE-2014-8158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2014-8158",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911837 for CVE-2014-8158",
          "url": "https://bugzilla.suse.com/911837"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969776 for CVE-2014-8158",
          "url": "https://bugzilla.suse.com/969776"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-8158"
    },
    {
      "cve": "CVE-2015-5203",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5203"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5203",
          "url": "https://www.suse.com/security/cve/CVE-2015-5203"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2015-5203",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 941919 for CVE-2015-5203",
          "url": "https://bugzilla.suse.com/941919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 942553 for CVE-2015-5203",
          "url": "https://bugzilla.suse.com/942553"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5203"
    },
    {
      "cve": "CVE-2015-5221",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5221"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5221",
          "url": "https://www.suse.com/security/cve/CVE-2015-5221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2015-5221",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 942553 for CVE-2015-5221",
          "url": "https://bugzilla.suse.com/942553"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5221"
    },
    {
      "cve": "CVE-2016-1577",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1577"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1577",
          "url": "https://www.suse.com/security/cve/CVE-2016-1577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-1577",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 968373 for CVE-2016-1577",
          "url": "https://bugzilla.suse.com/968373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1577"
    },
    {
      "cve": "CVE-2016-1867",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1867"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1867",
          "url": "https://www.suse.com/security/cve/CVE-2016-1867"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-1867",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961886 for CVE-2016-1867",
          "url": "https://bugzilla.suse.com/961886"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1867"
    },
    {
      "cve": "CVE-2016-2089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2089",
          "url": "https://www.suse.com/security/cve/CVE-2016-2089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-2089",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963983 for CVE-2016-2089",
          "url": "https://bugzilla.suse.com/963983"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2089"
    },
    {
      "cve": "CVE-2016-2116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2116",
          "url": "https://www.suse.com/security/cve/CVE-2016-2116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-2116",
          "url": "https://bugzilla.suse.com/1178702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 968373 for CVE-2016-2116",
          "url": "https://bugzilla.suse.com/968373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-2116"
    },
    {
      "cve": "CVE-2016-8690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8690",
          "url": "https://www.suse.com/security/cve/CVE-2016-8690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005084 for CVE-2016-8690",
          "url": "https://bugzilla.suse.com/1005084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007009 for CVE-2016-8690",
          "url": "https://bugzilla.suse.com/1007009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8690",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8690"
    },
    {
      "cve": "CVE-2016-8691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8691",
          "url": "https://www.suse.com/security/cve/CVE-2016-8691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005090 for CVE-2016-8691",
          "url": "https://bugzilla.suse.com/1005090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8691",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8691"
    },
    {
      "cve": "CVE-2016-8692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8692",
          "url": "https://www.suse.com/security/cve/CVE-2016-8692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005090 for CVE-2016-8692",
          "url": "https://bugzilla.suse.com/1005090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8692",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8692"
    },
    {
      "cve": "CVE-2016-8693",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8693"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8693",
          "url": "https://www.suse.com/security/cve/CVE-2016-8693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005242 for CVE-2016-8693",
          "url": "https://bugzilla.suse.com/1005242"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8693",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-8693"
    },
    {
      "cve": "CVE-2016-8880",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8880"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8880",
          "url": "https://www.suse.com/security/cve/CVE-2016-8880"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006591 for CVE-2016-8880",
          "url": "https://bugzilla.suse.com/1006591"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8880",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8880"
    },
    {
      "cve": "CVE-2016-8881",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8881"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4517. Reason: This candidate is a duplicate of CVE-2011-4517. Notes: All CVE users should reference CVE-2011-4517 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8881",
          "url": "https://www.suse.com/security/cve/CVE-2016-8881"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006593 for CVE-2016-8881",
          "url": "https://bugzilla.suse.com/1006593"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8881",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8881"
    },
    {
      "cve": "CVE-2016-8882",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8882"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8882",
          "url": "https://www.suse.com/security/cve/CVE-2016-8882"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006597 for CVE-2016-8882",
          "url": "https://bugzilla.suse.com/1006597"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8882",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8882"
    },
    {
      "cve": "CVE-2016-8883",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8883"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8883",
          "url": "https://www.suse.com/security/cve/CVE-2016-8883"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006598 for CVE-2016-8883",
          "url": "https://bugzilla.suse.com/1006598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8883",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8883"
    },
    {
      "cve": "CVE-2016-8884",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8884"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8884",
          "url": "https://www.suse.com/security/cve/CVE-2016-8884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005084 for CVE-2016-8884",
          "url": "https://bugzilla.suse.com/1005084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007009 for CVE-2016-8884",
          "url": "https://bugzilla.suse.com/1007009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8884",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-8884"
    },
    {
      "cve": "CVE-2016-8885",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8885"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8885",
          "url": "https://www.suse.com/security/cve/CVE-2016-8885"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005084 for CVE-2016-8885",
          "url": "https://bugzilla.suse.com/1005084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007009 for CVE-2016-8885",
          "url": "https://bugzilla.suse.com/1007009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8885",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-8885"
    },
    {
      "cve": "CVE-2016-8886",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8886"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8886",
          "url": "https://www.suse.com/security/cve/CVE-2016-8886"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006599 for CVE-2016-8886",
          "url": "https://bugzilla.suse.com/1006599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8886",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-8886"
    },
    {
      "cve": "CVE-2016-8887",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8887"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8887",
          "url": "https://www.suse.com/security/cve/CVE-2016-8887"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006836 for CVE-2016-8887",
          "url": "https://bugzilla.suse.com/1006836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1006839 for CVE-2016-8887",
          "url": "https://bugzilla.suse.com/1006839"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178702 for CVE-2016-8887",
          "url": "https://bugzilla.suse.com/1178702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjasper1-32bit-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libjasper-devel-1.900.14-181.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:libjasper-devel-1.900.14-181.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-11-10T17:06:16Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-8887"
    }
  ]
}

CVE-2016-8691 (GCVE-0-2016-8691)

Vulnerability from cvelistv5

Published

2017-02-15 19:00

Modified

2024-08-06 02:27

Severity ?

CWE

Summary

The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.

References

►

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=1385502	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/93593	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3785	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/08/23/6	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/	vendor-advisory, x_refsource_FEDORA
	https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/	x_refsource_MISC
	https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/10/16/14	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.287Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502"
          },
          {
            "name": "93593",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93593"
          },
          {
            "name": "DSA-3785",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3785"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20160823 Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
          },
          {
            "name": "FEDORA-2016-81f9c6f0ae",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020"
          },
          {
            "name": "[oss-security] 20161015 Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502"
        },
        {
          "name": "93593",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93593"
        },
        {
          "name": "DSA-3785",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3785"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20160823 Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
        },
        {
          "name": "FEDORA-2016-81f9c6f0ae",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020"
        },
        {
          "name": "[oss-security] 20161015 Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8691",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502"
            },
            {
              "name": "93593",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93593"
            },
            {
              "name": "DSA-3785",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3785"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20160823 Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
            },
            {
              "name": "FEDORA-2016-81f9c6f0ae",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/"
            },
            {
              "name": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020"
            },
            {
              "name": "[oss-security] 20161015 Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8691",
    "datePublished": "2017-02-15T19:00:00",
    "dateReserved": "2016-10-15T00:00:00",
    "dateUpdated": "2024-08-06T02:27:41.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8885 (GCVE-0-2016-8885)

Vulnerability from cvelistv5

Published

2017-03-23 18:00

Modified

2024-08-06 02:35

Severity ?

CWE

Summary

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.

References

►

URL

Tags

	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/	vendor-advisory, x_refsource_FEDORA
	https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2016/10/23/5	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/10/23/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/23/9	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/93834	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1385499	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:35:02.208Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-6c789ba91d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690"
          },
          {
            "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/5"
          },
          {
            "name": "FEDORA-2016-e0f0d48142",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/1"
          },
          {
            "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/9"
          },
          {
            "name": "93834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93834"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2016-6c789ba91d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690"
        },
        {
          "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/5"
        },
        {
          "name": "FEDORA-2016-e0f0d48142",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/1"
        },
        {
          "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/9"
        },
        {
          "name": "93834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93834"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8885",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2016-6c789ba91d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690"
            },
            {
              "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/5"
            },
            {
              "name": "FEDORA-2016-e0f0d48142",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/1"
            },
            {
              "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/9"
            },
            {
              "name": "93834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93834"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8885",
    "datePublished": "2017-03-23T18:00:00",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2024-08-06T02:35:02.208Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5203 (GCVE-0-2015-5203)

Vulnerability from cvelistv5

Published

2017-08-02 19:00

Modified

2024-08-06 06:41

Severity ?

CWE

Summary

Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/201707-07	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/08/16/2	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1254242	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/3693-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:41:07.991Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
          },
          {
            "name": "FEDORA-2016-bbecf64af4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/"
          },
          {
            "name": "GLSA-201707-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201707-07"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "openSUSE-SU-2016:2737",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html"
          },
          {
            "name": "[oss-security] 20150816 Double free corruption in JasPer JPEG-2000 implementation (CVE-2015-5203)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/08/16/2"
          },
          {
            "name": "FEDORA-2016-7776983633",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/"
          },
          {
            "name": "openSUSE-SU-2016:2722",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1254242"
          },
          {
            "name": "FEDORA-2016-9b17661de5",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/"
          },
          {
            "name": "USN-3693-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3693-1/"
          },
          {
            "name": "openSUSE-SU-2016:2833",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-08-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-22T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
        },
        {
          "name": "FEDORA-2016-bbecf64af4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/"
        },
        {
          "name": "GLSA-201707-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201707-07"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "openSUSE-SU-2016:2737",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html"
        },
        {
          "name": "[oss-security] 20150816 Double free corruption in JasPer JPEG-2000 implementation (CVE-2015-5203)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/08/16/2"
        },
        {
          "name": "FEDORA-2016-7776983633",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/"
        },
        {
          "name": "openSUSE-SU-2016:2722",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1254242"
        },
        {
          "name": "FEDORA-2016-9b17661de5",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/"
        },
        {
          "name": "USN-3693-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3693-1/"
        },
        {
          "name": "openSUSE-SU-2016:2833",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-5203",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
            },
            {
              "name": "FEDORA-2016-bbecf64af4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/"
            },
            {
              "name": "GLSA-201707-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201707-07"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "openSUSE-SU-2016:2737",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html"
            },
            {
              "name": "[oss-security] 20150816 Double free corruption in JasPer JPEG-2000 implementation (CVE-2015-5203)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/08/16/2"
            },
            {
              "name": "FEDORA-2016-7776983633",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/"
            },
            {
              "name": "openSUSE-SU-2016:2722",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1254242",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1254242"
            },
            {
              "name": "FEDORA-2016-9b17661de5",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/"
            },
            {
              "name": "USN-3693-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3693-1/"
            },
            {
              "name": "openSUSE-SU-2016:2833",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-5203",
    "datePublished": "2017-08-02T19:00:00",
    "dateReserved": "2015-07-01T00:00:00",
    "dateUpdated": "2024-08-06T06:41:07.991Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8692 (GCVE-0-2016-8692)

Vulnerability from cvelistv5

Published

2017-02-15 19:00

Modified

2024-08-06 02:27

Severity ?

CWE

Summary

References

►

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=1385502	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3785	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/93588	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/08/23/6	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/	vendor-advisory, x_refsource_FEDORA
	https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/	x_refsource_MISC
	https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/10/16/14	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.270Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502"
          },
          {
            "name": "DSA-3785",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3785"
          },
          {
            "name": "93588",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93588"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20160823 Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
          },
          {
            "name": "FEDORA-2016-81f9c6f0ae",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020"
          },
          {
            "name": "[oss-security] 20161015 Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502"
        },
        {
          "name": "DSA-3785",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3785"
        },
        {
          "name": "93588",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93588"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20160823 Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
        },
        {
          "name": "FEDORA-2016-81f9c6f0ae",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020"
        },
        {
          "name": "[oss-security] 20161015 Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8692",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385502"
            },
            {
              "name": "DSA-3785",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3785"
            },
            {
              "name": "93588",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93588"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20160823 Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
            },
            {
              "name": "FEDORA-2016-81f9c6f0ae",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/"
            },
            {
              "name": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020"
            },
            {
              "name": "[oss-security] 20161015 Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8692",
    "datePublished": "2017-02-15T19:00:00",
    "dateReserved": "2016-10-15T00:00:00",
    "dateUpdated": "2024-08-06T02:27:41.270Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2116 (GCVE-0-2016-2116)

Vulnerability from cvelistv5

Published

2016-04-13 14:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3508	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2016/03/03/12	mailing-list, x_refsource_MLIST
	https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2919-1	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/84133	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.579Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3508",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3508"
          },
          {
            "name": "[oss-security] 20160303 Security issues in JasPer (CVE-2016-1577 and CVE-2016-2116)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/03/03/12"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865"
          },
          {
            "name": "USN-2919-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2919-1"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "84133",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84133"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-3508",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3508"
        },
        {
          "name": "[oss-security] 20160303 Security issues in JasPer (CVE-2016-1577 and CVE-2016-2116)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/03/03/12"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865"
        },
        {
          "name": "USN-2919-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2919-1"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "84133",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84133"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-2116",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3508",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3508"
            },
            {
              "name": "[oss-security] 20160303 Security issues in JasPer (CVE-2016-1577 and CVE-2016-2116)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/03/03/12"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865",
              "refsource": "CONFIRM",
              "url": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865"
            },
            {
              "name": "USN-2919-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2919-1"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "84133",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84133"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2116",
    "datePublished": "2016-04-13T14:00:00",
    "dateReserved": "2016-01-29T00:00:00",
    "dateUpdated": "2024-08-05T23:17:50.579Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1867 (GCVE-0-2016-1867)

Vulnerability from cvelistv5

Published

2016-01-20 16:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.

References

►

URL

Tags

	http://www.securityfocus.com/bid/81488	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3785	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2016/01/13/2	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/01/13/6	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:39.594Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "81488",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/81488"
          },
          {
            "name": "DSA-3785",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3785"
          },
          {
            "name": "[oss-security] 20160113 Out-of-bounds Read in the JasPer\u0027s jpc_pi_nextcprl() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/01/13/2"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20160113 Re: Out-of-bounds Read in the JasPer\u0027s jpc_pi_nextcprl() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/01/13/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "81488",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/81488"
        },
        {
          "name": "DSA-3785",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3785"
        },
        {
          "name": "[oss-security] 20160113 Out-of-bounds Read in the JasPer\u0027s jpc_pi_nextcprl() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/01/13/2"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20160113 Re: Out-of-bounds Read in the JasPer\u0027s jpc_pi_nextcprl() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/01/13/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-1867",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "81488",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/81488"
            },
            {
              "name": "DSA-3785",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3785"
            },
            {
              "name": "[oss-security] 20160113 Out-of-bounds Read in the JasPer\u0027s jpc_pi_nextcprl() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/01/13/2"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20160113 Re: Out-of-bounds Read in the JasPer\u0027s jpc_pi_nextcprl() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/01/13/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-1867",
    "datePublished": "2016-01-20T16:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:39.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2089 (GCVE-0-2016-2089)

Vulnerability from cvelistv5

Published

2016-02-08 19:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3508	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/83108	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/01/28/6	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/01/28/4	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.592Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3508",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3508"
          },
          {
            "name": "83108",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83108"
          },
          {
            "name": "[oss-security] 20160128 Re: invalid Read in the JasPer\u0027s jas_matrix_clip() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/01/28/6"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20160128 invalid Read in the JasPer\u0027s jas_matrix_clip() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/01/28/4"
          },
          {
            "name": "openSUSE-SU-2016:0408",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html"
          },
          {
            "name": "openSUSE-SU-2016:0413",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3508",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3508"
        },
        {
          "name": "83108",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/83108"
        },
        {
          "name": "[oss-security] 20160128 Re: invalid Read in the JasPer\u0027s jas_matrix_clip() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/01/28/6"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20160128 invalid Read in the JasPer\u0027s jas_matrix_clip() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/01/28/4"
        },
        {
          "name": "openSUSE-SU-2016:0408",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html"
        },
        {
          "name": "openSUSE-SU-2016:0413",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-2089",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3508",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3508"
            },
            {
              "name": "83108",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/83108"
            },
            {
              "name": "[oss-security] 20160128 Re: invalid Read in the JasPer\u0027s jas_matrix_clip() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/01/28/6"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20160128 invalid Read in the JasPer\u0027s jas_matrix_clip() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/01/28/4"
            },
            {
              "name": "openSUSE-SU-2016:0408",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html"
            },
            {
              "name": "openSUSE-SU-2016:0413",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-2089",
    "datePublished": "2016-02-08T19:00:00",
    "dateReserved": "2016-01-28T00:00:00",
    "dateUpdated": "2024-08-05T23:17:50.592Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8881 (GCVE-0-2016-8881)

Vulnerability from cvelistv5

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4517. Reason: This candidate is a duplicate of CVE-2011-4517. Notes: All CVE users should reference CVE-2011-4517 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2017-01-13T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4517. Reason: This candidate is a duplicate of CVE-2011-4517. Notes: All CVE users should reference CVE-2011-4517 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8881",
    "datePublished": "2017-01-13T16:00:00",
    "dateRejected": "2017-01-13T15:57:01",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2017-01-13T15:57:01",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

CVE-2014-8158 (GCVE-0-2014-8158)

Vulnerability from cvelistv5

Published

2015-01-26 15:00

Modified

2024-08-06 13:10

Severity ?

CWE

Summary

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

References

►

URL

Tags

	http://secunia.com/advisories/62583	third-party-advisory, x_refsource_SECUNIA
	http://www.ocert.org/advisories/ocert-2015-001.html	x_refsource_MISC
	http://secunia.com/advisories/62619	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/72293	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/62765	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-2483-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2483-1	vendor-advisory, x_refsource_UBUNTU
	http://advisories.mageia.org/MGASA-2015-0038.html	x_refsource_CONFIRM
	http://secunia.com/advisories/62615	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2015-0698.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:034	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2015/dsa-3138	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0074.html	vendor-advisory, x_refsource_REDHAT
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606	vendor-advisory, x_refsource_SLACKWARE
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:159	vendor-advisory, x_refsource_MANDRIVA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:51.064Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "62583",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62583"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ocert.org/advisories/ocert-2015-001.html"
          },
          {
            "name": "62619",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62619"
          },
          {
            "name": "72293",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72293"
          },
          {
            "name": "62765",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62765"
          },
          {
            "name": "USN-2483-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2483-2"
          },
          {
            "name": "USN-2483-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2483-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0038.html"
          },
          {
            "name": "62615",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62615"
          },
          {
            "name": "RHSA-2015:0698",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
          },
          {
            "name": "openSUSE-SU-2015:0200",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html"
          },
          {
            "name": "MDVSA-2015:034",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:034"
          },
          {
            "name": "DSA-3138",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3138"
          },
          {
            "name": "RHSA-2015:0074",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0074.html"
          },
          {
            "name": "SSA:2015-302-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.538606"
          },
          {
            "name": "MDVSA-2015:159",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:159"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-01-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-30T15:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "62583",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62583"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ocert.org/advisories/ocert-2015-001.html"
        },
        {
          "name": "62619",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62619"
        },
        {
          "name": "72293",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72293"
        },
        {
          "name": "62765",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62765"
        },
        {
          "name": "USN-2483-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2483-2"
        },
        {
          "name": "USN-2483-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2483-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0038.html"
        },
        {
          "name": "62615",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62615"
        },
        {
          "name": "RHSA-2015:0698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
        },
        {
          "name": "openSUSE-SU-2015:0200",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html"
        },
        {
          "name": "MDVSA-2015:034",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:034"
        },
        {
          "name": "DSA-3138",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3138"
        },
        {
          "name": "RHSA-2015:0074",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0074.html"
        },
        {
          "name": "SSA:2015-302-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.538606"
        },
        {
          "name": "MDVSA-2015:159",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:159"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-8158",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "62583",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62583"
            },
            {
              "name": "http://www.ocert.org/advisories/ocert-2015-001.html",
              "refsource": "MISC",
              "url": "http://www.ocert.org/advisories/ocert-2015-001.html"
            },
            {
              "name": "62619",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62619"
            },
            {
              "name": "72293",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72293"
            },
            {
              "name": "62765",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62765"
            },
            {
              "name": "USN-2483-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2483-2"
            },
            {
              "name": "USN-2483-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2483-1"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0038.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0038.html"
            },
            {
              "name": "62615",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62615"
            },
            {
              "name": "RHSA-2015:0698",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
            },
            {
              "name": "openSUSE-SU-2015:0200",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html"
            },
            {
              "name": "MDVSA-2015:034",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:034"
            },
            {
              "name": "DSA-3138",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3138"
            },
            {
              "name": "RHSA-2015:0074",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0074.html"
            },
            {
              "name": "SSA:2015-302-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.538606"
            },
            {
              "name": "MDVSA-2015:159",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:159"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8158",
    "datePublished": "2015-01-26T15:00:00",
    "dateReserved": "2014-10-10T00:00:00",
    "dateUpdated": "2024-08-06T13:10:51.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8880 (GCVE-0-2016-8880)

Vulnerability from cvelistv5

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2017-01-13T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8880",
    "datePublished": "2017-01-13T16:00:00",
    "dateRejected": "2017-01-13T15:57:01",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2017-01-13T15:57:01",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

CVE-2016-8884 (GCVE-0-2016-8884)

Vulnerability from cvelistv5

Published

2017-03-28 14:00

Modified

2024-08-06 02:35

Severity ?

CWE

Summary

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.

References

►

URL

Tags

	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/	vendor-advisory, x_refsource_FEDORA
	https://github.com/mdadams/jasper/commit/5d66894d2313e3f3469f19066e149e08ff076698	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/10/23/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/23/9	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/93834	vdb-entry, x_refsource_BID
	https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690/	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1385499	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:35:02.104Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-6c789ba91d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/commit/5d66894d2313e3f3469f19066e149e08ff076698"
          },
          {
            "name": "FEDORA-2016-e0f0d48142",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/1"
          },
          {
            "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/9"
          },
          {
            "name": "93834",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93834"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2016-6c789ba91d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/commit/5d66894d2313e3f3469f19066e149e08ff076698"
        },
        {
          "name": "FEDORA-2016-e0f0d48142",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/1"
        },
        {
          "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/9"
        },
        {
          "name": "93834",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93834"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8884",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2016-6c789ba91d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
            },
            {
              "name": "https://github.com/mdadams/jasper/commit/5d66894d2313e3f3469f19066e149e08ff076698",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/commit/5d66894d2313e3f3469f19066e149e08ff076698"
            },
            {
              "name": "FEDORA-2016-e0f0d48142",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20161022 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/1"
            },
            {
              "name": "[oss-security] 20161023 Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/9"
            },
            {
              "name": "93834",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93834"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690/",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8884",
    "datePublished": "2017-03-28T14:00:00",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2024-08-06T02:35:02.104Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8690 (GCVE-0-2016-8690)

Vulnerability from cvelistv5

Published

2017-02-15 19:00

Modified

2024-08-06 02:27

Severity ?

CWE

Summary

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

References

►

URL

Tags

	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/	vendor-advisory, x_refsource_FEDORA
	https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html	mailing-list, x_refsource_MLIST
	https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/93590	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/08/23/6	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/16/14	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1385499	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.196Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-6c789ba91d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca"
          },
          {
            "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "93590",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93590"
          },
          {
            "name": "[oss-security] 20160823 Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
          },
          {
            "name": "[oss-security] 20161015 Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-22T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2016-6c789ba91d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca"
        },
        {
          "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "93590",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93590"
        },
        {
          "name": "[oss-security] 20160823 Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
        },
        {
          "name": "[oss-security] 20161015 Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8690",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2016-6c789ba91d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
            },
            {
              "name": "https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca"
            },
            {
              "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "93590",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93590"
            },
            {
              "name": "[oss-security] 20160823 Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
            },
            {
              "name": "[oss-security] 20161015 Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385499"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8690",
    "datePublished": "2017-02-15T19:00:00",
    "dateReserved": "2016-10-15T00:00:00",
    "dateUpdated": "2024-08-06T02:27:41.196Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8886 (GCVE-0-2016-8886)

Vulnerability from cvelistv5

Published

2017-03-23 18:00

Modified

2024-08-06 02:35

Severity ?

CWE

Summary

The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.

References

►

URL

Tags

	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/	vendor-advisory, x_refsource_FEDORA
	https://blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c	x_refsource_MISC
	http://www.securityfocus.com/bid/93839	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/10/25/11	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1388880	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/10/23/2	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:35:02.214Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-6c789ba91d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c"
          },
          {
            "name": "93839",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93839"
          },
          {
            "name": "[oss-security] 20161025 Re: Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/25/11"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388880"
          },
          {
            "name": "[oss-security] 20161022 Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/2"
          },
          {
            "name": "FEDORA-2016-e0f0d48142",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-03-24T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2016-6c789ba91d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c"
        },
        {
          "name": "93839",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93839"
        },
        {
          "name": "[oss-security] 20161025 Re: Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/25/11"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388880"
        },
        {
          "name": "[oss-security] 20161022 Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/2"
        },
        {
          "name": "FEDORA-2016-e0f0d48142",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8886",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2016-6c789ba91d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c"
            },
            {
              "name": "93839",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93839"
            },
            {
              "name": "[oss-security] 20161025 Re: Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/25/11"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1388880",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388880"
            },
            {
              "name": "[oss-security] 20161022 Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/2"
            },
            {
              "name": "FEDORA-2016-e0f0d48142",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8886",
    "datePublished": "2017-03-23T18:00:00",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2024-08-06T02:35:02.214Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8882 (GCVE-0-2016-8882)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 02:35

Severity ?

CWE

Summary

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

References

►

URL

Tags

	http://www.securityfocus.com/bid/95864	vdb-entry, x_refsource_BID
	https://github.com/mdadams/jasper/issues/30	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3785	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2016/10/17/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/23/8	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:35:02.195Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95864",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95864"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/issues/30"
          },
          {
            "name": "DSA-3785",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3785"
          },
          {
            "name": "[oss-security] 20161017 Re: Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/17/1"
          },
          {
            "name": "[oss-security] 20161022 Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/8"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "95864",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95864"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/issues/30"
        },
        {
          "name": "DSA-3785",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3785"
        },
        {
          "name": "[oss-security] 20161017 Re: Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/17/1"
        },
        {
          "name": "[oss-security] 20161022 Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/8"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8882",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95864",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95864"
            },
            {
              "name": "https://github.com/mdadams/jasper/issues/30",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/issues/30"
            },
            {
              "name": "DSA-3785",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3785"
            },
            {
              "name": "[oss-security] 20161017 Re: Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/17/1"
            },
            {
              "name": "[oss-security] 20161022 Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/8"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8882",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2024-08-06T02:35:02.195Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5221 (GCVE-0-2015-5221)

Vulnerability from cvelistv5

Published

2017-07-25 18:00

Modified

2024-08-06 06:41

Severity ?

CWE

Summary

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2015/08/20/4	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html	vendor-advisory, x_refsource_SUSE
	https://github.com/mdadams/jasper/commit/df5d2867e8004e51e18b89865bc4aa69229227b3	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1255710	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/3693-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:41:08.383Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
          },
          {
            "name": "[oss-security] 20150820 Use-after-free (and double-free) in Jasper JPEG-200 (CVE-2015-5221)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/08/20/4"
          },
          {
            "name": "FEDORA-2016-bbecf64af4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "openSUSE-SU-2016:2737",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/commit/df5d2867e8004e51e18b89865bc4aa69229227b3"
          },
          {
            "name": "FEDORA-2016-7776983633",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/"
          },
          {
            "name": "openSUSE-SU-2016:2722",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1255710"
          },
          {
            "name": "FEDORA-2016-9b17661de5",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/"
          },
          {
            "name": "USN-3693-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3693-1/"
          },
          {
            "name": "openSUSE-SU-2016:2833",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-08-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-22T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
        },
        {
          "name": "[oss-security] 20150820 Use-after-free (and double-free) in Jasper JPEG-200 (CVE-2015-5221)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/08/20/4"
        },
        {
          "name": "FEDORA-2016-bbecf64af4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "openSUSE-SU-2016:2737",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/commit/df5d2867e8004e51e18b89865bc4aa69229227b3"
        },
        {
          "name": "FEDORA-2016-7776983633",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/"
        },
        {
          "name": "openSUSE-SU-2016:2722",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1255710"
        },
        {
          "name": "FEDORA-2016-9b17661de5",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/"
        },
        {
          "name": "USN-3693-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3693-1/"
        },
        {
          "name": "openSUSE-SU-2016:2833",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-5221",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20181121 [SECURITY] [DLA 1583-1] jasper security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html"
            },
            {
              "name": "[oss-security] 20150820 Use-after-free (and double-free) in Jasper JPEG-200 (CVE-2015-5221)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/08/20/4"
            },
            {
              "name": "FEDORA-2016-bbecf64af4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "openSUSE-SU-2016:2737",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html"
            },
            {
              "name": "https://github.com/mdadams/jasper/commit/df5d2867e8004e51e18b89865bc4aa69229227b3",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/commit/df5d2867e8004e51e18b89865bc4aa69229227b3"
            },
            {
              "name": "FEDORA-2016-7776983633",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/"
            },
            {
              "name": "openSUSE-SU-2016:2722",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1255710",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1255710"
            },
            {
              "name": "FEDORA-2016-9b17661de5",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/"
            },
            {
              "name": "USN-3693-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3693-1/"
            },
            {
              "name": "openSUSE-SU-2016:2833",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-5221",
    "datePublished": "2017-07-25T18:00:00",
    "dateReserved": "2015-07-01T00:00:00",
    "dateUpdated": "2024-08-06T06:41:08.383Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8883 (GCVE-0-2016-8883)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 02:35

Severity ?

CWE

Summary

The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

References

►

URL

Tags

	http://www.securityfocus.com/bid/95865	vdb-entry, x_refsource_BID
	https://github.com/mdadams/jasper/issues/32	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/10/17/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/23/8	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3693-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:35:01.816Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95865",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95865"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/issues/32"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20161017 Re: Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/17/1"
          },
          {
            "name": "[oss-security] 20161022 Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/8"
          },
          {
            "name": "USN-3693-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3693-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-28T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "95865",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95865"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/issues/32"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20161017 Re: Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/17/1"
        },
        {
          "name": "[oss-security] 20161022 Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/8"
        },
        {
          "name": "USN-3693-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3693-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8883",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95865",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95865"
            },
            {
              "name": "https://github.com/mdadams/jasper/issues/32",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/issues/32"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20161017 Re: Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/17/1"
            },
            {
              "name": "[oss-security] 20161022 Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/8"
            },
            {
              "name": "USN-3693-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3693-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8883",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2024-08-06T02:35:01.816Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8693 (GCVE-0-2016-8693)

Vulnerability from cvelistv5

Published

2017-02-15 19:00

Modified

2024-08-06 02:27

Severity ?

CWE

Summary

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.

References

►

URL

Tags

	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/bid/93587	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3785	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/08/23/6	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html	vendor-advisory, x_refsource_SUSE
	https://github.com/mdadams/jasper/commit/44a524e367597af58d6265ae2014468b334d0309	x_refsource_CONFIRM
	https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2016/10/16/14	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1385507	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.245Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-6c789ba91d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
          },
          {
            "name": "93587",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93587"
          },
          {
            "name": "DSA-3785",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3785"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "[oss-security] 20160823 Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
          },
          {
            "name": "openSUSE-SU-2016:2722",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/commit/44a524e367597af58d6265ae2014468b334d0309"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/"
          },
          {
            "name": "[oss-security] 20161015 Re: Fuzzing jasper",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385507"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2016-6c789ba91d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
        },
        {
          "name": "93587",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93587"
        },
        {
          "name": "DSA-3785",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3785"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "[oss-security] 20160823 Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
        },
        {
          "name": "openSUSE-SU-2016:2722",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/commit/44a524e367597af58d6265ae2014468b334d0309"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/"
        },
        {
          "name": "[oss-security] 20161015 Re: Fuzzing jasper",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385507"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8693",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2016-6c789ba91d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
            },
            {
              "name": "93587",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93587"
            },
            {
              "name": "DSA-3785",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3785"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "[oss-security] 20160823 Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/23/6"
            },
            {
              "name": "openSUSE-SU-2016:2722",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html"
            },
            {
              "name": "https://github.com/mdadams/jasper/commit/44a524e367597af58d6265ae2014468b334d0309",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/commit/44a524e367597af58d6265ae2014468b334d0309"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/"
            },
            {
              "name": "[oss-security] 20161015 Re: Fuzzing jasper",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/16/14"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1385507",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1385507"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8693",
    "datePublished": "2017-02-15T19:00:00",
    "dateReserved": "2016-10-15T00:00:00",
    "dateUpdated": "2024-08-06T02:27:41.245Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8887 (GCVE-0-2016-8887)

Vulnerability from cvelistv5

Published

2017-03-23 18:00

Modified

2024-08-06 02:35

Severity ?

CWE

Summary

The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).

References

►

URL

Tags

	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/bid/93835	vdb-entry, x_refsource_BID
	https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=1388828	x_refsource_CONFIRM
	https://usn.ubuntu.com/3693-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/10/23/3	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/23/6	mailing-list, x_refsource_MLIST
	https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358d	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:35:02.281Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-6c789ba91d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
          },
          {
            "name": "93835",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93835"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c"
          },
          {
            "name": "FEDORA-2016-e0f0d48142",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388828"
          },
          {
            "name": "USN-3693-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3693-1/"
          },
          {
            "name": "[oss-security] 20161022 Re: jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/3"
          },
          {
            "name": "[oss-security] 20161023 jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/23/6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358d"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-28T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2016-6c789ba91d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
        },
        {
          "name": "93835",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93835"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c"
        },
        {
          "name": "FEDORA-2016-e0f0d48142",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388828"
        },
        {
          "name": "USN-3693-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3693-1/"
        },
        {
          "name": "[oss-security] 20161022 Re: jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/3"
        },
        {
          "name": "[oss-security] 20161023 jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/23/6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358d"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-8887",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2016-6c789ba91d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/"
            },
            {
              "name": "93835",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93835"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c"
            },
            {
              "name": "FEDORA-2016-e0f0d48142",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1388828",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388828"
            },
            {
              "name": "USN-3693-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3693-1/"
            },
            {
              "name": "[oss-security] 20161022 Re: jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/3"
            },
            {
              "name": "[oss-security] 20161023 jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/23/6"
            },
            {
              "name": "https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358d",
              "refsource": "CONFIRM",
              "url": "https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358d"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-8887",
    "datePublished": "2017-03-23T18:00:00",
    "dateReserved": "2016-10-22T00:00:00",
    "dateUpdated": "2024-08-06T02:35:02.281Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-3522 (GCVE-0-2008-3522)

Vulnerability from cvelistv5

Published

2008-10-02 18:00

Modified

2024-08-07 09:45

Severity ?

CWE

Summary

Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.

References

►

URL

Tags

	http://www.securityfocus.com/bid/31470	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:164	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:144	vendor-advisory, x_refsource_MANDRIVA
	http://bugs.gentoo.org/attachment.cgi?id=163282&action=view	x_refsource_MISC
	http://secunia.com/advisories/34391	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:142	vendor-advisory, x_refsource_MANDRIVA
	http://bugs.gentoo.org/show_bug.cgi?id=222819	x_refsource_MISC
	http://www.ubuntu.com/usn/USN-742-1	vendor-advisory, x_refsource_UBUNTU
	https://exchange.xforce.ibmcloud.com/vulnerabilities/45623	vdb-entry, x_refsource_XF
	http://rhn.redhat.com/errata/RHSA-2015-0698.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/33173	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200812-18.xml	vendor-advisory, x_refsource_GENTOO
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606	vendor-advisory, x_refsource_SLACKWARE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:45:18.634Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "31470",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/31470"
          },
          {
            "name": "MDVSA-2009:164",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
          },
          {
            "name": "MDVSA-2009:144",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:144"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/attachment.cgi?id=163282\u0026action=view"
          },
          {
            "name": "34391",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34391"
          },
          {
            "name": "MDVSA-2009:142",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=222819"
          },
          {
            "name": "USN-742-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-742-1"
          },
          {
            "name": "jasper-jasstreamprintf-bo(45623)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45623"
          },
          {
            "name": "RHSA-2015:0698",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
          },
          {
            "name": "33173",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33173"
          },
          {
            "name": "GLSA-200812-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200812-18.xml"
          },
          {
            "name": "SSA:2015-302-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.538606"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-09-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "31470",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/31470"
        },
        {
          "name": "MDVSA-2009:164",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
        },
        {
          "name": "MDVSA-2009:144",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:144"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.gentoo.org/attachment.cgi?id=163282\u0026action=view"
        },
        {
          "name": "34391",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34391"
        },
        {
          "name": "MDVSA-2009:142",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=222819"
        },
        {
          "name": "USN-742-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-742-1"
        },
        {
          "name": "jasper-jasstreamprintf-bo(45623)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45623"
        },
        {
          "name": "RHSA-2015:0698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
        },
        {
          "name": "33173",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33173"
        },
        {
          "name": "GLSA-200812-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200812-18.xml"
        },
        {
          "name": "SSA:2015-302-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.538606"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2008-3522",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "31470",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/31470"
            },
            {
              "name": "MDVSA-2009:164",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
            },
            {
              "name": "MDVSA-2009:144",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:144"
            },
            {
              "name": "http://bugs.gentoo.org/attachment.cgi?id=163282\u0026action=view",
              "refsource": "MISC",
              "url": "http://bugs.gentoo.org/attachment.cgi?id=163282\u0026action=view"
            },
            {
              "name": "34391",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34391"
            },
            {
              "name": "MDVSA-2009:142",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=222819",
              "refsource": "MISC",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=222819"
            },
            {
              "name": "USN-742-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-742-1"
            },
            {
              "name": "jasper-jasstreamprintf-bo(45623)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45623"
            },
            {
              "name": "RHSA-2015:0698",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html"
            },
            {
              "name": "33173",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33173"
            },
            {
              "name": "GLSA-200812-18",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200812-18.xml"
            },
            {
              "name": "SSA:2015-302-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.538606"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-3522",
    "datePublished": "2008-10-02T18:00:00",
    "dateReserved": "2008-08-07T00:00:00",
    "dateUpdated": "2024-08-07T09:45:18.634Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1577 (GCVE-0-2016-1577)

Vulnerability from cvelistv5

Published

2016-04-13 14:00

Modified

2024-08-05 23:02

Severity ?

CWE

Summary

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3508	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2016/03/03/12	mailing-list, x_refsource_MLIST
	https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2919-1	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2017:1208	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/84133	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:02:11.739Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3508",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3508"
          },
          {
            "name": "[oss-security] 20160303 Security issues in JasPer (CVE-2016-1577 and CVE-2016-2116)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/03/03/12"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865"
          },
          {
            "name": "USN-2919-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2919-1"
          },
          {
            "name": "RHSA-2017:1208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1208"
          },
          {
            "name": "84133",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84133"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "name": "DSA-3508",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3508"
        },
        {
          "name": "[oss-security] 20160303 Security issues in JasPer (CVE-2016-1577 and CVE-2016-2116)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/03/03/12"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865"
        },
        {
          "name": "USN-2919-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2919-1"
        },
        {
          "name": "RHSA-2017:1208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1208"
        },
        {
          "name": "84133",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84133"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2016-1577",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3508",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3508"
            },
            {
              "name": "[oss-security] 20160303 Security issues in JasPer (CVE-2016-1577 and CVE-2016-2116)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/03/03/12"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865",
              "refsource": "CONFIRM",
              "url": "https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865"
            },
            {
              "name": "USN-2919-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2919-1"
            },
            {
              "name": "RHSA-2017:1208",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1208"
            },
            {
              "name": "84133",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84133"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2016-1577",
    "datePublished": "2016-04-13T14:00:00",
    "dateReserved": "2016-01-12T00:00:00",
    "dateUpdated": "2024-08-05T23:02:11.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2016:2775-1

Vulnerability from csaf_suse

CVE-2016-8691 (GCVE-0-2016-8691)

Vulnerability from cvelistv5

CVE-2016-8885 (GCVE-0-2016-8885)

Vulnerability from cvelistv5

CVE-2015-5203 (GCVE-0-2015-5203)

Vulnerability from cvelistv5

CVE-2016-8692 (GCVE-0-2016-8692)

Vulnerability from cvelistv5

CVE-2016-2116 (GCVE-0-2016-2116)

Vulnerability from cvelistv5

CVE-2016-1867 (GCVE-0-2016-1867)

Vulnerability from cvelistv5

CVE-2016-2089 (GCVE-0-2016-2089)

Vulnerability from cvelistv5

CVE-2016-8881 (GCVE-0-2016-8881)

Vulnerability from cvelistv5

CVE-2014-8158 (GCVE-0-2014-8158)

Vulnerability from cvelistv5

CVE-2016-8880 (GCVE-0-2016-8880)

Vulnerability from cvelistv5

CVE-2016-8884 (GCVE-0-2016-8884)

Vulnerability from cvelistv5

CVE-2016-8690 (GCVE-0-2016-8690)

Vulnerability from cvelistv5

CVE-2016-8886 (GCVE-0-2016-8886)

Vulnerability from cvelistv5

CVE-2016-8882 (GCVE-0-2016-8882)

Vulnerability from cvelistv5

CVE-2015-5221 (GCVE-0-2015-5221)

Vulnerability from cvelistv5

CVE-2016-8883 (GCVE-0-2016-8883)

Vulnerability from cvelistv5

CVE-2016-8693 (GCVE-0-2016-8693)

Vulnerability from cvelistv5

CVE-2016-8887 (GCVE-0-2016-8887)

Vulnerability from cvelistv5

CVE-2008-3522 (GCVE-0-2008-3522)

Vulnerability from cvelistv5

CVE-2016-1577 (GCVE-0-2016-1577)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature