CVE-2016-9398
Fixed in a distro release EPSS 6%
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Products: jasper_project jasper, fedoraproject fedora, opensuse leap, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 12 SP1 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | jasper | 2.0.14-3.16.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | jasper | 2.0.14-3.16.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | jasper | 2.0.14-3.16.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 | jasper | 2.0.14-3.16.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP1 | jasper | 2.0.14-3.16.1 |
| SUSE Linux Enterprise Server 11 SP4 | jasper | 1.900.14-134.32.1 |
| SUSE Linux Enterprise Server 12 SP1 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Server 12 SP2 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Server 12 SP5 | jasper | 1.900.14-195.22.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | jasper | 1.900.14-134.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | jasper | 1.900.14-195.22.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | jasper | 1.900.14-134.32.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | jasper | 1.900.14-184.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | jasper | 1.900.14-195.22.1 |
| Ubuntu 16.04 LTS | jasper | no fix |
| openSUSE Leap 15.1 | jasper | 2.0.14-lp151.4.9.1 |
| openSUSE Leap 15.2 | jasper | 2.0.14-lp152.7.3.1 |
| openSUSE Tumbleweed | jasper | 1.900.14-3.1 |