CVE-2016-9583
Description
An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.318
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2017:0953-1(SUSE Linux Enterprise Desktop 12-SP1 ) jasper-debuginfo-1.900.14-194.1.x86_64.rpm | Linux |
| SUSE-SU-2017:0953-1(SUSE Linux Enterprise Desktop 12-SP1 ) jasper-debugsource-1.900.14-194.1.x86_64.rpm | Linux |
| SUSE-SU-2017:0953-1(SUSE Linux Enterprise Desktop 12-SP1 ) libjasper1-1.900.14-194.1.x86_64.rpm | Linux |
| SUSE-SU-2017:0953-1(SUSE Linux Enterprise Desktop 12-SP1 ) libjasper1-32bit-1.900.14-194.1.x86_64.rpm | Linux |
| SUSE-SU-2017:0953-1(SUSE Linux Enterprise Desktop 12-SP1 ) libjasper1-debuginfo-1.900.14-194.1.x86_64.rpm | Linux |
| SUSE-SU-2017:0953-1(SUSE Linux Enterprise Desktop 12-SP1 ) libjasper1-debuginfo-32bit-1.900.14-194.1.x86_64.rpm | Linux |
| Jasper update (ELSA-2017-1208) jasper-1.900.1-21.el6_9.x86_64.rpm | Linux |
| Jasper-devel update (ELSA-2017-1208) jasper-devel-1.900.1-21.el6_9.x86_64.rpm | Linux |
| Jasper-libs update (ELSA-2017-1208) jasper-libs-1.900.1-21.el6_9.x86_64.rpm | Linux |
| Jasper-utils update (ELSA-2017-1208) jasper-utils-1.900.1-21.el6_9.x86_64.rpm | Linux |
| Jasper update (ELSA-2017-1208) jasper-1.900.1-21.el6_9.i686.rpm | Linux |
| Jasper-devel update (ELSA-2017-1208) jasper-devel-1.900.1-21.el6_9.i686.rpm | Linux |
| Jasper-libs update (ELSA-2017-1208) jasper-libs-1.900.1-21.el6_9.i686.rpm | Linux |
| Jasper-utils update (ELSA-2017-1208) jasper-utils-1.900.1-21.el6_9.i686.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234