CVE-2016-9398

Published: Mar 23, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.

Affected (14)

Products: Jasper Project: Jasper · Fedoraproject: Fedora · Opensuse: Leap · +1 more

Show all products

Jasper Project: Jasper · Fedoraproject: Fedora · Opensuse: Leap · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit

1 product

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jasper Project Jasper	Before 1.900.17

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 32
Fedoraproject Fedora	Version 33

Configuration C

11 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1
Opensuse Leap	Version 15.2
Opensuse Leap	Version 42.1
Opensuse Leap	Version 42.2
Suse Linux Enterprise Desktop	Version 12 sp1
Suse Linux Enterprise Desktop	Version 12 sp2
Suse Linux Enterprise Server	Version 12 sp1
Suse Linux Enterprise Server	Version 12 sp2
Suse Linux Enterprise Server	Version 12 sp2
Suse Linux Enterprise Software Development Kit	Version 12 sp1
Suse Linux Enterprise Software Development Kit	Version 12 sp2

Related CWEs

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (20)

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/11/17/1

Source: cve@mitre.org

Mailing ListPatchThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/94382

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure

Source: cve@mitre.org

PatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1396980

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/11/17/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/94382

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1396980

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.