CVE-2016-9396
Fixed in a distro release EPSS 6%
The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
Products: jasper_project jasper
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | jasper | 1.900.1-33.amzn2 |
| Amazon Linux 2 | jasper-devel | 1.900.1-33.amzn2 |
| Amazon Linux 2 | jasper-libs | 1.900.1-33.amzn2 |
| Amazon Linux 2 | jasper-utils | 1.900.1-33.amzn2 |
| Red Hat Enterprise Linux 7 | jasper | 0:1.900.1-33.el7 |
| Red Hat Enterprise Linux 7 | jasper-debuginfo | 0:1.900.1-33.el7 |
| Red Hat Enterprise Linux 7 | jasper-devel | 0:1.900.1-33.el7 |
| Red Hat Enterprise Linux 7 | jasper-libs | 0:1.900.1-33.el7 |
| Red Hat Enterprise Linux 7 | jasper-utils | 0:1.900.1-33.el7 |
| SUSE Linux Enterprise Desktop 12 SP4 | jasper | 1.900.14-195.15.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | jasper | 2.0.14-3.3.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | jasper | 2.0.14-3.3.2 |
| SUSE Linux Enterprise Server 12 SP4 | jasper | 1.900.14-195.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | jasper | 1.900.14-195.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | jasper | 1.900.14-195.15.1 |
| Ubuntu 14.04 LTS | jasper | 1.900.1-14ubuntu3.5 |
| Ubuntu 16.04 LTS | jasper | 1.900.1-debian1-2.4ubuntu1.2 |
| openSUSE Leap 15.0 | jasper | 2.0.14-lp150.2.3.1 |
| openSUSE Tumbleweed | jasper | 2.0.33-1.2 |