Vulnerability Details : CVE-2016-9262
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
Vulnerability category: OverflowMemory CorruptionDenial of service
Products affected by CVE-2016-9262
- cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-9262
0.23%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 42 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-9262
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2016-9262
-
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-9262
-
https://blogs.gentoo.org/ago/2016/11/07/jasper-use-after-free-in-jas_realloc-jas_malloc-c
jasper: use after free in jas_realloc (jas_malloc.c) | agostino's blogThird Party Advisory
-
http://www.openwall.com/lists/oss-security/2016/11/10/4
oss-security - Re: jasper: use after free in jas_realloc (jas_malloc.c)Mailing List;Third Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=1393882
1393882 – (CVE-2016-9262) CVE-2016-9262 jasper: integer truncation in jas_image_cmpt_create()Issue Tracking;Third Party Advisory
-
https://usn.ubuntu.com/3693-1/
USN-3693-1: JasPer vulnerabilities | Ubuntu security notices
-
https://access.redhat.com/errata/RHSA-2017:1208
RHSA-2017:1208 - Security Advisory - Red Hat Customer Portal
-
https://security.gentoo.org/glsa/201707-07
JasPer: Multiple vulnerabilities (GLSA 201707-07) — Gentoo security
-
http://www.securityfocus.com/bid/94224
JasPer CVE-2016-9262 Integer Overflow VulnerabilityThird Party Advisory;VDB Entry
-
https://github.com/mdadams/jasper/commit/634ce8e8a5accc0fa05dd2c20d42b4749d4b2735
Made some changes to the I/O stream library for memory streams. · mdadams/jasper@634ce8e · GitHubIssue Tracking;Patch;Vendor Advisory
Jump to