Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-9389

Fixed in a distro release EPSS 4%

The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).

Published 2017-03-23 · CVE record · OSV

Products: jasper_project jasper

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 6jasper0:1.900.1-21.el6_9
Red Hat Enterprise Linux 6jasper-debuginfo0:1.900.1-21.el6_9
Red Hat Enterprise Linux 6jasper-devel0:1.900.1-21.el6_9
Red Hat Enterprise Linux 6jasper-libs0:1.900.1-21.el6_9
Red Hat Enterprise Linux 6jasper-utils0:1.900.1-21.el6_9
Red Hat Enterprise Linux 7jasper0:1.900.1-30.el7_3
Red Hat Enterprise Linux 7jasper-debuginfo0:1.900.1-30.el7_3
Red Hat Enterprise Linux 7jasper-devel0:1.900.1-30.el7_3
Red Hat Enterprise Linux 7jasper-libs0:1.900.1-30.el7_3
Red Hat Enterprise Linux 7jasper-utils0:1.900.1-30.el7_3
SUSE Linux Enterprise Desktop 12 SP2jasper1.900.14-195.3.1
SUSE Linux Enterprise Desktop 12 SP3jasper1.900.14-195.5.1
SUSE Linux Enterprise Server 11 SP4jasper1.900.14-134.33.3.1
SUSE Linux Enterprise Server 12 SP2jasper1.900.14-195.3.1
SUSE Linux Enterprise Server 12 SP3jasper1.900.14-195.5.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2jasper1.900.14-195.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4jasper1.900.14-134.33.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2jasper1.900.14-195.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3jasper1.900.14-195.5.1
SUSE Linux Enterprise Software Development Kit 11 SP4jasper1.900.14-134.33.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2jasper1.900.14-195.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3jasper1.900.14-195.5.1
Ubuntu 14.04 LTSjasper1.900.1-14ubuntu3.5
Ubuntu 16.04 LTSjasper1.900.1-debian1-2.4ubuntu1.2
openSUSE Tumbleweedjasper2.0.33-1.2