Vulnerability Details : CVE-2016-9262
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
Vulnerability category: OverflowMemory CorruptionDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2016-9262
Probability of exploitation activity in the next 30 days: 0.62%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 76 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2016-9262
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
nvd@nist.gov |
5.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
nvd@nist.gov |
CWE ids for CVE-2016-9262
-
The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-9262
-
https://blogs.gentoo.org/ago/2016/11/07/jasper-use-after-free-in-jas_realloc-jas_malloc-c
jasper: use after free in jas_realloc (jas_malloc.c) | agostino's blogThird Party Advisory
-
http://www.openwall.com/lists/oss-security/2016/11/10/4
oss-security - Re: jasper: use after free in jas_realloc (jas_malloc.c)Mailing List;Third Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=1393882
1393882 – (CVE-2016-9262) CVE-2016-9262 jasper: integer truncation in jas_image_cmpt_create()Issue Tracking;Third Party Advisory
-
https://usn.ubuntu.com/3693-1/
USN-3693-1: JasPer vulnerabilities | Ubuntu security notices
-
https://access.redhat.com/errata/RHSA-2017:1208
RHSA-2017:1208 - Security Advisory - Red Hat Customer Portal
-
https://security.gentoo.org/glsa/201707-07
JasPer: Multiple vulnerabilities (GLSA 201707-07) — Gentoo security
-
http://www.securityfocus.com/bid/94224
JasPer CVE-2016-9262 Integer Overflow VulnerabilityThird Party Advisory;VDB Entry
-
https://github.com/mdadams/jasper/commit/634ce8e8a5accc0fa05dd2c20d42b4749d4b2735
Made some changes to the I/O stream library for memory streams. · mdadams/jasper@634ce8e · GitHubIssue Tracking;Patch;Vendor Advisory
Products affected by CVE-2016-9262
- cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*