Name: CVE-2016-9583: Integer Overflow or Wraparound
Creator: Rapid7
Published: 2018-08-01T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2016-9583, CWE-125, CWE-190, CVSS 7.8, EPSS 0.00318

An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.0 Base Score: 5.5
CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon_linux	—	Upgrade jasper	Jun 7, 2017	Apr 5, 2017
Centos_linux	—	Upgrade jasperUpgrade jasper-debuginfoUpgrade jasper-develUpgrade jasper-utilsUpgrade jasper-libs	May 19, 2017	Apr 5, 2017
Huawei Euleros 2_0_sp1	—	Upgrade jasper-libs	Aug 28, 2019	Aug 1, 2018
Huawei Euleros 2_0_sp2	—	Upgrade jasper-libs	Aug 28, 2019	Aug 1, 2018
Oracle_linux	—	Upgrade jasper-libsUpgrade jasper-develUpgrade jasperUpgrade jasper-utils	May 9, 2017	Dec 9, 2016
Redhat_linux	—	Upgrade jasper-debuginfoUpgrade jasper-libsNo solution existsUpgrade jasperUpgrade jasper-develUpgrade jasper-utils	May 9, 2017	Apr 5, 2017
Suse	—	Upgrade libjasper1Upgrade libjasper-develUpgrade libjasper-x86Upgrade libjasper4Upgrade libjasperUpgrade libjasper-32bitUpgrade libjasper1-32bit	Apr 5, 2017	Apr 5, 2017

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence