Name: CVE-2016-9583: Integer Overflow or Wraparound
Creator: Rapid7
Published: 2018-08-01T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2016-9583, CWE-125, CWE-190, CVSS 7.8, EPSS 0.01889

An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.0 Base Score: 5.5
CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon_linux	—	Upgrade jasper	Jun 7, 2017	Apr 5, 2017
Centos_linux	—	Upgrade jasper-utilsUpgrade jasper-libsUpgrade jasperUpgrade jasper-debuginfoUpgrade jasper-devel	May 19, 2017	Apr 5, 2017
Huawei Euleros 2_0_sp1	—	Upgrade jasper-libs	Aug 28, 2019	Aug 1, 2018
Huawei Euleros 2_0_sp2	—	Upgrade jasper-libs	Aug 28, 2019	Aug 1, 2018
Oracle_linux	—	Upgrade jasper-utilsUpgrade jasperUpgrade jasper-develUpgrade jasper-libs	May 9, 2017	Dec 9, 2016
Redhat_linux	—	Upgrade jasper-debuginfoUpgrade jasper-libsUpgrade jasperNo solution existsUpgrade jasper-utilsUpgrade jasper-devel	May 9, 2017	Apr 5, 2017
Suse	—	Upgrade libjasper-32bitUpgrade libjasperUpgrade libjasper1-32bitUpgrade libjasper4Upgrade libjasper-x86Upgrade libjasper-develUpgrade libjasper1	Apr 5, 2017	Apr 5, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence