vulnerability

SUSE: CVE-2016-8884: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Nov 5, 2016
Added
Nov 7, 2016
Modified
Aug 10, 2021

Description

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.

Solution(s)

suse-upgrade-libjaspersuse-upgrade-libjasper-32bitsuse-upgrade-libjasper-develsuse-upgrade-libjasper-x86suse-upgrade-libjasper1suse-upgrade-libjasper1-32bitsuse-upgrade-libjasper4
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.