CVE-2016-8690

CVE-2016-8690

Name

CVE-2016-8690

Description

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Mailing List	http://www.openwall.com/lists/oss-security/2016/08/23/6
Mailing List	http://www.openwall.com/lists/oss-security/2016/10/16/14
Third Party Advisory	http://www.securityfocus.com/bid/93590
cve@mitre.org	https://access.redhat.com/errata/RHSA-2017:1208
Exploit	https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/
Exploit	https://bugzilla.redhat.com/show_bug.cgi?id=1385499
Patch	https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca
cve@mitre.org	https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html
cve@mitre.org	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/

Type

URI

Mailing List

http://www.openwall.com/lists/oss-security/2016/08/23/6

Mailing List

http://www.openwall.com/lists/oss-security/2016/10/16/14

Third Party Advisory

http://www.securityfocus.com/bid/93590

cve@mitre.org

https://access.redhat.com/errata/RHSA-2017:1208

Exploit

https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/