このjasperの更新では、次の問題が修正されます：セキュリティ修正：

  - CVE-2016-8887：jp2_colr_destroy（jp2_cod.c）でのNULLポインターデリファレンス（bsc#1006836）

  - CVE-2016-8886：jas_malloc（jas_malloc.c）でのメモリ割り当ての失敗（bsc#1006599）

  - CVE-2016-8884、CVE-2016-8885：bmp_getdataでの2つのNULLポインターデリファレンス（CVE-2016-8690の不完全な修正）（bsc#1007009）

  - CVE-2016-8883：jpc_dec_tiledecode()でのアサート（bsc#1006598）

  - CVE-2016-8882：jpc_pi_destroyでのセグメンテーション違反/NULLポインターアクセス（bsc#1006597）

  - CVE-2016-8881：jpc_getuint16()でのヒープオーバーフロー（bsc#1006593）

  - CVE-2016-8880：jpc_dec_cp_setfromcox()でのヒープオーバーフロー（bsc#1006591）

  - CVE-2016-8693：- mem_closeでの二重解放の脆弱性（bsc#1005242）

  - CVE-2016-8691、CVE-2016-8692：jpc_dec_process_sizでのゼロ除算（bsc#1005090）

  - CVE-2016-8690：細工されたBMP画像によって引き起こされるbmp_getdataでのNULLポインターデリファレンス（bsc#1005084）

  - CVE-2016-2089：JasPer の jas_matrix_clip() 関数での無効な読み取り（bsc#963983）

  - CVE-2016-1867：JasPer'のjpc_pi_nextcprl()関数での領域外読み取り（bsc#961886）

  - CVE-2016-1577、CVE-2016-2116：jas_iccattrval_destroy関数での二重解放の脆弱性（bsc#968373）

  - CVE-2015-5221：Jasper JPEG-200におけるのメモリ解放後使用（Use After Free）（および二重解放）（bsc#942553）

  - CVE-2015-5203：JasPer JPEG-2000実装における二重解放の破損（bsc#941919）

  - CVE-2008-3522：複数の整数オーバーフロー（bsc#392410）

  - bsc#1006839：jp2_colr_destroy（jp2_cod.c）でのNULLポインターデリファレンス（CVE-2016-8887の不完全な修正）

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - jasper: heap-based buffer over-read of size 8 in jas_image_depalettize in libjasper/base/jas_image.c     (CVE-2018-19541)

  - jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

  - The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a     denial of service (NULL pointer dereference) via vectors involving an empty sequence. (CVE-2016-10248)

  - Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote     attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
    (CVE-2016-10251)

  - Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows     remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC     color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137. (CVE-2016-1577)

  - The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-     of-bounds read and application crash) via a crafted JPEG 2000 image. (CVE-2016-1867)

  - The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of     service (invalid read and application crash) via a crafted JPEG 2000 image. (CVE-2016-2089)

  - Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote     attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000     image file. (CVE-2016-2116)

  - The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to     cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
    (CVE-2016-8690)

  - The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz     value in a BMP image to the imginfo command. (CVE-2016-8691)

  - The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz     value in a BMP image to the imginfo command. (CVE-2016-8692)

  - Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows     remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP     image to the imginfo command. (CVE-2016-8693)

  - The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-8883)

  - The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a     denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
    NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690. (CVE-2016-8884)

  - The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to     cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP     image. (CVE-2016-8885)

  - The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers     to have unspecified impact via a crafted file, which triggers a memory allocation failure. (CVE-2016-8886)

  - Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize     function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of     service via a crafted image, which triggers use after free vulnerabilities. (CVE-2016-9262)

  - Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13     allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion     failure. (CVE-2016-9387)

  - The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial     of service (assertion failure) via a crafted image file. (CVE-2016-9388)

  - The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause     a denial of service (assertion failure). (CVE-2016-9389)

  - The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a     denial of service (assertion failure) via a crafted image file. (CVE-2016-9390)

  - The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a     denial of service (assertion failure) via a very large integer. (CVE-2016-9391)

  - The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9392)

  - The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9393)

  - The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9394)

  - The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9395)

  - The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause     a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. (CVE-2016-9396)

  - The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9397)

  - The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via unspecified vectors. (CVE-2016-9398)

  - The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9399)

  - An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before     2.0.6 when processing crafted input. (CVE-2016-9583)

  - JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000     image files resulting in a crash on the application using JasPer. (CVE-2016-9591)

  - JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation     of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
    (CVE-2016-9600)

  - There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer     2.0.12 that will lead to a remote denial of service attack by triggering an unexpected     jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154. (CVE-2017-13745)

  - There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13747)

  - There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in     base/jas_string.c, that will lead to a remote denial of service attack. (CVE-2017-13748)

  - There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13749)

  - There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13751)

  - There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13752)

  - JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17,     1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27,     1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8,     2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of     service (heap-based buffer over-read and application crash) via a crafted image, related to the     jas_image_ishomosamp function in libjasper/base/jas_image.c. (CVE-2017-14132)

  - The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a     denial of service (invalid memory read and crash) via a crafted image. (CVE-2017-5504)

  - The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of     service (invalid read) via a crafted image. (CVE-2017-6851)

  - Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote     attackers to have unspecified impact via a crafted image. (CVE-2017-6852)

  - JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and     application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.
    (CVE-2017-9782)

  - An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function     ras_putdatastd in ras/ras_enc.c. (CVE-2018-18873)

  - An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt     in libjasper/base/jas_image.c, leading to a denial of service. (CVE-2018-19539)

  - An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14,     1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24,     1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4,     2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a     heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c.
    (CVE-2018-19540)

  - An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode     in libjasper/jp2/jp2_dec.c, leading to a denial of service. (CVE-2018-19542)

  - An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function     jp2_decode in libjasper/jp2/jp2_dec.c. (CVE-2018-19543)

  - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in     libjasper/jpc/jpc_math.c. (CVE-2018-9055)

  - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in     libjasper/jpc/jpc_enc.c. (CVE-2018-9252)

  - A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function     whic may lead to disclosure of information or program crash. (CVE-2021-26926)

  - A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead     to program crash and denial of service. (CVE-2021-26927)

  - jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is     an invalid relationship between the number of channels and the number of image components. (CVE-2021-3272)

  - A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component     references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application     using the Jasper library to crash when opened. (CVE-2021-3443)

  - A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component     references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an     application using the Jasper library to crash when opened. (CVE-2021-3467)

  - JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in     libjasper/base/jas_image.c. (CVE-2022-40755)

  - An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to     execute arbitrary code. (CVE-2023-51257)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update for jasper to version 1.900.14 fixes several issues.

These security issues were fixed :

  - CVE-2008-3522: Buffer overflow in the jas_stream_printf     function in libjasper/base/jas_stream.c in JasPer might     have allowed context-dependent attackers to have an     unknown impact via vectors related to the mif_hdr_put     function and use of vsprintf (bsc#392410)

  - CVE-2015-5203: Double free corruption in JasPer     JPEG-2000 implementation (bsc#941919).

  - CVE-2015-5221: Use-after-free (and double-free) in     Jasper JPEG-200 (bsc#942553).

  - CVE-2016-1577: Double free vulnerability in the     jas_iccattrval_destroy function in JasPer allowed remote     attackers to cause a denial of service (crash) or     possibly execute arbitrary code via a crafted ICC color     profile in a JPEG 2000 image file, a different     vulnerability than CVE-2014-8137 (bsc#968373).

  - CVE-2016-2116: Memory leak in the     jas_iccprof_createfrombuf function in JasPer allowed     remote attackers to cause a denial of service (memory     consumption) via a crafted ICC color profile in a JPEG     2000 image file (bsc#968373)

  - CVE-2016-8690: NULL pointer dereference in bmp_getdata     triggered by crafted BMP image (bsc#1005084).

  - CVE-2016-8691, CVE-2016-8692: Missing range check on     XRsiz and YRsiz fields of SIZ marker segment     (bsc#1005090).

  - CVE-2016-8693: The memory stream interface allowed for a     buffer size of zero. The case of a zero-sized buffer was     not handled correctly, as it could lead to a double free     (bsc#1005242).

  - CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox()     (bsc#1006591).

  - CVE-2016-8881: Heap overflow in jpc_getuint16()     (bsc#1006593).

  - CVE-2016-8882: NULL pointer access in jpc_pi_destroy     (bsc#1006597).

  - CVE-2016-8883: Assert triggered in jpc_dec_tiledecode()     (bsc#1006598).

  - CVE-2016-8886: Memory allocation failure in jas_malloc     (jas_malloc.c) (bsc#1006599).

For additional change description please have a look at the changelog.

This update for jasper to version 1.900.14 fixes several issues.

These security issues were fixed :

  - CVE-2016-8887: NULL pointer dereference in     jp2_colr_destroy (jp2_cod.c) (bsc#1006836)

  - CVE-2016-8886: memory allocation failure in jas_malloc     (jas_malloc.c) (bsc#1006599)

  - CVE-2016-8884,CVE-2016-8885: two NULL pointer     dereferences in bmp_getdata (incomplete fix for     CVE-2016-8690) (bsc#1007009)

  - CVE-2016-8883: assert in jpc_dec_tiledecode()     (bsc#1006598)

  - CVE-2016-8882: segfault / NULL pointer access in     jpc_pi_destroy (bsc#1006597)

  - CVE-2016-8881: Heap overflow in jpc_getuint16()     (bsc#1006593)

  - CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox()     (bsc#1006591)

  - CVE-2016-8693 Double free vulnerability in mem_close     (bsc#1005242)

  - CVE-2016-8691, CVE-2016-8692: Divide by zero in     jpc_dec_process_siz (bsc#1005090)

  - CVE-2016-8690: NULL pointer dereference in bmp_getdata     triggered by crafted BMP image (bsc#1005084)

  - CVE-2016-2116: Memory leak in the     jas_iccprof_createfrombuf function in JasPer allowed     remote attackers to cause a denial of service (memory     consumption) via a crafted ICC color profile in a JPEG     2000 image file (bsc#968373) 

  - CVE-2016-2089: invalid read in the JasPer's     jas_matrix_clip() function (bsc#963983)

  - CVE-2016-1867: Out-of-bounds Read in the JasPer's     jpc_pi_nextcprl() function (bsc#961886)

  - CVE-2015-5221: Use-after-free (and double-free) in     Jasper JPEG-200 (bsc#942553).

  - CVE-2015-5203: Double free corruption in JasPer     JPEG-2000 implementation (bsc#941919)

  - CVE-2008-3522: Buffer overflow in the jas_stream_printf     function in libjasper/base/jas_stream.c in JasPer might     have allowed context-dependent attackers to have an     unknown impact via vectors related to the mif_hdr_put     function and use of vsprintf (bsc#392410)

  - jasper: NULL pointer dereference in jp2_colr_destroy     (jp2_cod.c) (incomplete fix for CVE-2016-8887)     (bsc#1006839)

For additional change description please have a look at the changelog.

This update was imported from the SUSE:SLE-12:Update update project.

This update for jasper to version 1.900.14 fixes several issues.

These security issues were fixed :

  - CVE-2008-3522: Buffer overflow in the jas_stream_printf     function in libjasper/base/jas_stream.c in JasPer might     have allowed context-dependent attackers to have an     unknown impact via vectors related to the mif_hdr_put     function and use of vsprintf (bsc#392410)

  - CVE-2015-5203: Double free corruption in JasPer     JPEG-2000 implementation (bsc#941919).

  - CVE-2015-5221: Use-after-free (and double-free) in     Jasper JPEG-200 (bsc#942553).

  - CVE-2016-1577: Double free vulnerability in the     jas_iccattrval_destroy function in JasPer allowed remote     attackers to cause a denial of service (crash) or     possibly execute arbitrary code via a crafted ICC color     profile in a JPEG 2000 image file, a different     vulnerability than CVE-2014-8137 (bsc#968373).

  - CVE-2016-2116: Memory leak in the     jas_iccprof_createfrombuf function in JasPer allowed     remote attackers to cause a denial of service (memory     consumption) via a crafted ICC color profile in a JPEG     2000 image file (bsc#968373)

  - CVE-2016-8690: NULL pointer dereference in bmp_getdata     triggered by crafted BMP image (bsc#1005084).

  - CVE-2016-8691, CVE-2016-8692: Missing range check on     XRsiz and YRsiz fields of SIZ marker segment     (bsc#1005090).

  - CVE-2016-8693: The memory stream interface allowed for a     buffer size of zero. The case of a zero-sized buffer was     not handled correctly, as it could lead to a double free     (bsc#1005242).

  - CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox()     (bsc#1006591).

  - CVE-2016-8881: Heap overflow in jpc_getuint16()     (bsc#1006593).

  - CVE-2016-8882: NULL pointer access in jpc_pi_destroy     (bsc#1006597).

  - CVE-2016-8883: Assert triggered in jpc_dec_tiledecode()     (bsc#1006598).

  - CVE-2016-8886: Memory allocation failure in jas_malloc     (jas_malloc.c) (bsc#1006599).

    For additional change description please have a look at     the changelog.

This update for jasper fixes the following issues: Security fixes :

  - CVE-2016-8887: NULL pointer dereference in     jp2_colr_destroy (jp2_cod.c) (bsc#1006836)

  - CVE-2016-8886: memory allocation failure in jas_malloc     (jas_malloc.c) (bsc#1006599)

  - CVE-2016-8884,CVE-2016-8885: two NULL pointer     dereferences in bmp_getdata (incomplete fix for     CVE-2016-8690) (bsc#1007009)

  - CVE-2016-8883: assert in jpc_dec_tiledecode()     (bsc#1006598)

  - CVE-2016-8882: segfault / NULL pointer access in     jpc_pi_destroy (bsc#1006597)

  - CVE-2016-8881: Heap overflow in jpc_getuint16()     (bsc#1006593)

  - CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox()     (bsc#1006591)

  - CVE-2016-8693: Double free vulnerability in mem_close     (bsc#1005242)

  - CVE-2016-8691, CVE-2016-8692: Divide by zero in     jpc_dec_process_siz (bsc#1005090)

  - CVE-2016-8690: NULL pointer dereference in bmp_getdata     triggered by crafted BMP image (bsc#1005084)

  - CVE-2016-2089: invalid read in the JasPer's     jas_matrix_clip() function (bsc#963983)

  - CVE-2016-1867: Out-of-bounds Read in the JasPer's     jpc_pi_nextcprl() function (bsc#961886)

  - CVE-2016-1577, CVE-2016-2116: double free vulnerability     in the jas_iccattrval_destroy function (bsc#968373)

  - CVE-2015-5221: Use-after-free (and double-free) in     Jasper JPEG-200 (bsc#942553)

  - CVE-2015-5203: Double free corruption in JasPer     JPEG-2000 implementation (bsc#941919)

  - CVE-2008-3522: multiple integer overflows (bsc#392410)

  - bsc#1006839: NULL pointer dereference in     jp2_colr_destroy (jp2_cod.c) (incomplete fix for     CVE-2016-8887)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue has been found in JasPer 2.0.14. There is a     memory leak in jas_malloc.c when called from     jpc_unk_getparms in jpc_cs.c.(CVE-2018-19139)

  - The jpc_dec_tilefini function in     libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows     remote attackers to cause a denial of service (NULL     pointer dereference and crash) via a crafted     file.(CVE-2016-8882)

  - The jas_malloc function in libjasper/base/jas_malloc.c     in JasPer before 1.900.11 allows remote attackers to     have unspecified impact via a crafted file, which     triggers a memory allocation failure.(CVE-2016-8886)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - jasper: heap-based buffer over-read of size 8 in jas_image_depalettize in libjasper/base/jas_image.c     (CVE-2018-19541)

  - jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

  - The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers     to have unspecified impact via a crafted file, which triggers a memory allocation failure. (CVE-2016-8886)

  - The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9395)

  - The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause     a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. (CVE-2016-9396)

  - The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9397)

  - The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via unspecified vectors. (CVE-2016-9398)

  - The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9399)

  - JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check     to see if the image contained at least one component resulting in a denial-of-service. (CVE-2017-1000050)

  - There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13747)

  - There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in     base/jas_string.c, that will lead to a remote denial of service attack. (CVE-2017-13748)

  - There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13749)

  - There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13751)

  - There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13752)

  - JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17,     1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27,     1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8,     2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of     service (heap-based buffer over-read and application crash) via a crafted image, related to the     jas_image_ishomosamp function in libjasper/base/jas_image.c. (CVE-2017-14132)

  - The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a     denial of service (invalid memory read and crash) via a crafted image. (CVE-2017-5504)

  - The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of     service (invalid read) via a crafted image. (CVE-2017-6851)

  - Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote     attackers to have unspecified impact via a crafted image. (CVE-2017-6852)

  - JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and     application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.
    (CVE-2017-9782)

  - An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function     ras_putdatastd in ras/ras_enc.c. (CVE-2018-18873)

  - An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from     jpc_unk_getparms in jpc_cs.c. (CVE-2018-19139)

  - An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt     in libjasper/base/jas_image.c, leading to a denial of service. (CVE-2018-19539)

  - An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14,     1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24,     1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4,     2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a     heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c.
    (CVE-2018-19540)

  - An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode     in libjasper/jp2/jp2_dec.c, leading to a denial of service. (CVE-2018-19542)

  - An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function     jp2_decode in libjasper/jp2/jp2_dec.c. (CVE-2018-19543)

  - jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read. (CVE-2018-20570)

  - JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when --output-format jp2 is used.
    (CVE-2018-20622)

  - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in     libjasper/jpc/jpc_math.c. (CVE-2018-9055)

  - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in     libjasper/jpc/jpc_enc.c. (CVE-2018-9252)

  - A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function     whic may lead to disclosure of information or program crash. (CVE-2021-26926)

  - A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead     to program crash and denial of service. (CVE-2021-26927)

  - jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is     an invalid relationship between the number of channels and the number of image components. (CVE-2021-3272)

  - A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component     references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application     using the Jasper library to crash when opened. (CVE-2021-3443)

  - A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component     references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an     application using the Jasper library to crash when opened. (CVE-2021-3467)

  - JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in     libjasper/base/jas_image.c. (CVE-2022-40755)

  - An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to     execute arbitrary code. (CVE-2023-51257)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

このバージョン1.900.14への jasperの更新では、いくつかの問題が修正されます。

これらのセキュリティの問題が修正されました：

  - CVE-2008-3522：JasPerのlibjasper/base/jas_stream.cにあるjas_stream_printf関数でのバッファオーバーフローにより、コンテキスト依存の攻撃者が、mif_hdr_put関数およびvsprintfの使用に関連するベクトルを通じて、未知の影響を与えることができる可能性があります（bsc#392410）

  - CVE-2015-5203：JasPer JPEG-2000実装における二重解放の破損（bsc#941919）。

  - CVE-2015-5221：Jasper JPEG-200におけるのメモリ解放後使用（Use After Free）（および二重解放）（bsc#942553）。

  - CVE-2016-1577：JasPerのjas_iccattrval_destroy関数における二十解放の脆弱性により、リモート攻撃者がJPEG 2000画像ファイルに含まれる細工されたICCカラープロファイルを使用して、サービス拒否（クラッシュ）を引き起こしたり、任意のコードを実行できる可能性があります。これはCVE-2014-8137とは異なる脆弱性です（bsc#968373）。

  - CVE-2016-2116：JasPerのjas_iccprof_createfrombuf関数でのメモリリークにより、リモート攻撃者がJPEG 2000画像ファイルに含まれる細工されたICCカラープロファイルを使用して、サービス拒否(クラッシュ）を引き起こす可能性があります（bsc#968373）

  - CVE-2016-8690：細工されたBMP画像によって引き起こされるbmp_getdataでのNULLポインターデリファレンス（bsc#1005084）。

  - CVE-2016-8691、CVE-2016-8692：SIZマーカーセグメントのXRsizおよびYRsizフィールドでの範囲チェックの欠落（bsc#1005090）。

  - CVE-2016-8693：メモリストリームインターフェイスにより、ゼロのバッファサイズが可能になりました。サイズがゼロのバッファのケースが正しく処理されませんでした。これにより、二重解放が発生する可能性があります（bsc#1005242）。

  - CVE-2016-8880：jpc_dec_cp_setfromcox()でのヒープオーバーフロー（bsc#1006591）。

  - CVE-2016-8881：jpc_getuint16()でのヒープオーバーフロー（bsc#1006593）。

  - CVE-2016-8882：jpc_pi_destroyでのNULLポインターアクセス（bsc#1006597）。

  - CVE-2016-8883：jpc_dec_tiledecode()で引き起こされるアサーション（bsc#1006598）。

  - CVE-2016-8886：jas_malloc（jas_malloc.c）でのメモリ割り当ての失敗（bsc#1006599）。

その他の変更の説明については、変更ログを参照してください。

このバージョン 1.900.14 への jasperの更新プログラムでは、いくつかの問題が修正されます。

これらのセキュリティの問題が修正されました：

  - CVE-2008-3522：JasPerのlibjasper/base/jas_stream.cにあるjas_stream_printf関数でのバッファオーバーフローにより、コンテキスト依存の攻撃者が、mif_hdr_put関数およびvsprintfの使用に関連するベクトルを通じて、未知の影響を与えることができる可能性があります（bsc#392410）

  - CVE-2015-5203：JasPer JPEG-2000実装における二重解放の破損（bsc#941919）。

  - CVE-2015-5221：Jasper JPEG-200におけるのuse-after-free（および二重解放）（bsc#942553）。

  - CVE-2016-1577：JasPerのjas_iccattrval_destroy関数における二十解放の脆弱性により、リモート攻撃者がサービス拒否(クラッシュ）を引き起こしたり、JPEG 2000画像ファイルに含まれる細工されたICCカラープロファイルを使用して任意のコードを実行できる可能性があります。これはCVE-2014-8137とは異なる脆弱性です（bsc#968373）。

  - CVE-2016-2116：JasPerのjas_iccprof_createfrombuf関数でのメモリリークにより、リモート攻撃者が function in  allowed remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file (bsc#968373)

  - CVE-2016-8690：細工されたBMP画像によって引き起こされるbmp_getdataでのNULLポインターデリファレンス（bsc#1005084）。

  - CVE-2016-8691、CVE-2016-8692：SIZマーカーセグメントのXRsizおよびYRsizフィールドでの範囲チェックの欠落（bsc#1005090）。

  - CVE-2016-8693：メモリストリームインターフェイスにより、ゼロのバッファサイズを使用できる可能性がありました。☆ サイズがゼロのバッファのケースが正しく処理されませんでした。これにより、二重解放が発生する可能性があります（bsc#1005242）。

  - CVE-2016-8880：jpc_dec_cp_setfromcox()でのヒープオーバーフロー（bsc#1006591）。

  - CVE-2016-8881：jpc_getuint16()でのヒープオーバーフロー（bsc#1006593）。

  - CVE-2016-8882：jpc_pi_destroyでのNULLポインターアクセス（bsc#1006597）。

  - CVE-2016-8883：jpc_dec_tiledecode()で引き起こされるアサート（bsc#1006598）。☆

  - CVE-2016-8886：jas_malloc（jas_malloc.c）でのメモリ割り当ての失敗（bsc#1006599）。

    その他の変更の説明については、変更ログを参照してください。

このバージョン 1.900.14 への jasperの更新プログラムでは、いくつかの問題が修正されます。

これらのセキュリティの問題が修正されました：

  - CVE-2016-8887：jp2_colr_destroy（jp2_cod.c）でのNULLポインターデリファレンス（bsc#1006836）

  - CVE-2016-8886：jas_malloc（jas_malloc.c）でのメモリ割り当ての失敗（bsc#1006599）

  - CVE-2016-8884、CVE-2016-8885：bmp_getdataでの2つのNULLポインターデリファレンス（CVE-2016-8690の不完全な修正）（bsc#1007009）

  - CVE-2016-8883：jpc_dec_tiledecode()でのアサート（bsc#1006598）

  - CVE-2016-8882：jpc_pi_destroyでのセグメンテーション違反/NULLポインターアクセス（bsc#1006597）

  - CVE-2016-8881：jpc_getuint16()でのヒープオーバーフロー（bsc#1006593）

  - CVE-2016-8880：jpc_dec_cp_setfromcox()でのヒープオーバーフロー（bsc#1006591）

  - CVE-2016-8693 mem_closeでの二重解放の脆弱性（bsc#1005242）

  - CVE-2016-8691、CVE-2016-8692：jpc_dec_process_sizでのゼロ除算（bsc#1005090）

  - CVE-2016-8690：細工されたBMP画像によって引き起こされるbmp_getdataでのNULLポインターデリファレンス（bsc#1005084）

  - CVE-2016-2116：JasPerのjas_iccprof_createfrombuf関数でのメモリリークにより、リモート攻撃者がJPEG 2000画像ファイルに含まれる細工されたICCカラープロファイルを使用して、サービス拒否(クラッシュ）を引き起こす可能性があります（bsc#968373） 

  - CVE-2016-2089：JasPer の jas_matrix_clip() 関数での無効な読み取り（bsc#963983）

  - CVE-2016-1867：JasPer'のjpc_pi_nextcprl()関数での領域外読み取り（bsc#961886）

  - CVE-2015-5221：Jasper JPEG-200におけるのuse-after-free（および二重解放）（bsc#942553）。

  - CVE-2015-5203：JasPer JPEG-2000実装における二重解放の破損（bsc#941919）

  - CVE-2008-3522：JasPerのlibjasper/base/jas_stream.cにあるjas_stream_printf関数でのバッファオーバーフローにより、コンテキスト依存の攻撃者が、mif_hdr_put関数およびvsprintfの使用に関連するベクトルを通じて、未知の影響を与えることができる可能性があります（bsc#392410）

  - jasper: jp2_colr_destroy（jp2_cod.c）でのNULLポインターデリファレンス（CVE-2016-8887の不完全な修正）（bsc#1006839）

その他の変更の説明については、変更ログを参照してください。

この更新はSUSEからインポートされました：SLE-12：更新プロジェクトを更新します。

この更新には、CVE-2016-8883、CVE-2016-8882、CVE-2016-8881、CVE-2016-8880、CVE-2016-8884、CVE-2016-8885、CVE-2016-8887、CVE-2016-8886のセキュリティ修正が含まれています。

----

jasperの新しいバージョンが利用可能です（jasper-1.900.13）。CVE-2016-8690、CVE-2016-8691、CVE-2016-8692、CVE-2016-8693 に対するセキュリティ修正。

----

jasperの新しいバージョンが利用可能です（1.900.3）

----

以下のためのセキュリティ修正 CVE-2016-2089

----

jasperの新しいバージョンが利用可能です。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

このバージョン 1.900.14 への jasperの更新プログラムでは、いくつかの問題が修正されます。これらのセキュリティの問題が修正されました：

  - CVE-2016-8887： jp2_colr_destroy（jp2_cod.c）でのNULLポインターデリファレンス（bsc#1006836）

  - CVE-2016-8886：jas_malloc（jas_malloc.c）でのメモリ割り当ての失敗（bsc#1006599）

  - CVE-2016-8884、CVE-2016-8885：bmp_getdataでの2つのNULLポインターデリファレンス（CVE-2016-8690の不完全な修正）（bsc#1007009）

  - CVE-2016-8883：jpc_dec_tiledecode()でのアサート（bsc#1006598）

  - CVE-2016-8882：jpc_pi_destroyでのセグメンテーション違反/NULLポインターアクセス（bsc#1006597）

  - CVE-2016-8881：jpc_getuint16()でのヒープオーバーフロー（bsc#1006593）

  - CVE-2016-8880：jpc_dec_cp_setfromcox()でのヒープオーバーフロー（bsc#1006591）

  - CVE-2016-8693 mem_closeでの二重解放の脆弱性（bsc#1005242）

  - CVE-2016-8691、CVE-2016-8692：jpc_dec_process_sizでのゼロ除算（bsc#1005090）

  - CVE-2016-8690：細工されたBMP画像によって引き起こされるbmp_getdataでのNULLポインターデリファレンス（bsc#1005084）

  - CVE-2016-2116：JasPerのjas_iccprof_createfrombuf関数でのメモリリークにより、リモート攻撃者が function in  allowed remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file (bsc#968373)

  - CVE-2016-2089：JasPer の jas_matrix_clip() 関数での無効な読み取り（bsc#963983）

  - CVE-2016-1867：JasPer'のjpc_pi_nextcprl()関数での領域外読み取り（bsc#961886）

  - CVE-2015-5221：Jasper JPEG-200におけるのuse-after-free（および二重解放）（bsc#942553）。

  - CVE-2015-5203：JasPer JPEG-2000実装における二重解放の破損（bsc#941919）

  - CVE-2008-3522：JasPerのlibjasper/base/jas_stream.cにあるjas_stream_printf関数でのバッファオーバーフローにより、コンテキスト依存の攻撃者が、mif_hdr_put関数およびvsprintfの使用に関連するベクトルを通じて、未知の影響を与えることができる可能性があります（bsc#392410）

  - jasper: jp2_colr_destroy（jp2_cod.c）でのNULLポインターでリファレンス（CVE-2016-8887の不完全な修正）（bsc#1006839）その他の変更の説明については、変更ログを参照してください。

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

This update contains security fix for CVE-2016-8883, CVE-2016-8882, CVE-2016-8881, CVE-2016-8880, CVE-2016-8884, CVE-2016-8885, CVE-2016-8887, CVE-2016-8886.

----

New version of jasper is available (jasper-1.900.13). Security fix for CVE-2016-8690, CVE-2016-8691, CVE-2016-8692, CVE-2016-8693.

----

New version of jasper is available (1.900.3)

----

Security fix for CVE-2016-2089

----

New version of jasper is available.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The jp2_colr_destroy function in jp2_cod.c in JasPer     before 1.900.13 allows remote attackers to cause a     denial of service (NULL pointer dereference) by     leveraging incorrect cleanup of JP2 box data on error.
    NOTE: this vulnerability exists because of an     incomplete fix for CVE-2016-8887.(CVE-2016-10250)

  - The jp2_colr_destroy function in     libjasper/jp2/jp2_cod.c in JasPer before 1.900.10     allows remote attackers to cause a denial of service     (NULL pointer dereference).(CVE-2016-8887)

  - The jp2_cdef_destroy function in jp2_cod.c in JasPer     before 2.0.13 allows remote attackers to cause a denial     of service (NULL pointer dereference) via a crafted     image.(CVE-2017-6850)

  - The jas_malloc function in libjasper/base/jas_malloc.c     in JasPer before 1.900.11 allows remote attackers to     have unspecified impact via a crafted file, which     triggers a memory allocation failure.(CVE-2016-8886)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed :

  - CVE-2016-8887: NULL pointer dereference in     jp2_colr_destroy (jp2_cod.c) (bsc#1006836)

  - CVE-2016-8886: memory allocation failure in jas_malloc     (jas_malloc.c) (bsc#1006599)

  - CVE-2016-8884,CVE-2016-8885: two NULL pointer     dereferences in bmp_getdata (incomplete fix for     CVE-2016-8690) (bsc#1007009)

  - CVE-2016-8883: assert in jpc_dec_tiledecode()     (bsc#1006598)

  - CVE-2016-8882: segfault / NULL pointer access in     jpc_pi_destroy (bsc#1006597)

  - CVE-2016-8881: Heap overflow in jpc_getuint16()     (bsc#1006593)

  - CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox()     (bsc#1006591)

  - CVE-2016-8693 Double free vulnerability in mem_close     (bsc#1005242)

  - CVE-2016-8691, CVE-2016-8692: Divide by zero in     jpc_dec_process_siz (bsc#1005090)

  - CVE-2016-8690: NULL pointer dereference in bmp_getdata     triggered by crafted BMP image (bsc#1005084)

  - CVE-2016-2116: Memory leak in the     jas_iccprof_createfrombuf function in JasPer allowed     remote attackers to cause a denial of service (memory     consumption) via a crafted ICC color profile in a JPEG     2000 image file (bsc#968373)

  - CVE-2016-2089: invalid read in the JasPer's     jas_matrix_clip() function (bsc#963983)

  - CVE-2016-1867: Out-of-bounds Read in the JasPer's     jpc_pi_nextcprl() function (bsc#961886)

  - CVE-2015-5221: Use-after-free (and double-free) in     Jasper JPEG-200 (bsc#942553).

  - CVE-2015-5203: Double free corruption in JasPer     JPEG-2000 implementation (bsc#941919)

  - CVE-2008-3522: Buffer overflow in the jas_stream_printf     function in libjasper/base/jas_stream.c in JasPer might     have allowed context-dependent attackers to have an     unknown impact via vectors related to the mif_hdr_put     function and use of vsprintf (bsc#392410)

  - jasper: NULL pointer dereference in jp2_colr_destroy     (jp2_cod.c) (incomplete fix for CVE-2016-8887)     (bsc#1006839) For additional change description please     have a look at the changelog.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

  - The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a     denial of service (NULL pointer dereference) via vectors involving an empty sequence. (CVE-2016-10248)

  - Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote     attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer     overflow. (CVE-2016-10249)

  - Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote     attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
    (CVE-2016-10251)

  - The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of     service (invalid read and application crash) via a crafted JPEG 2000 image. (CVE-2016-2089)

  - The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to     cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
    (CVE-2016-8690)

  - The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz     value in a BMP image to the imginfo command. (CVE-2016-8691)

  - The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote     attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz     value in a BMP image to the imginfo command. (CVE-2016-8692)

  - Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows     remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP     image to the imginfo command. (CVE-2016-8693)

  - The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-8883)

  - The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a     denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
    NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690. (CVE-2016-8884)

  - The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to     cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP     image. (CVE-2016-8885)

  - The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers     to have unspecified impact via a crafted file, which triggers a memory allocation failure. (CVE-2016-8886)

  - Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize     function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of     service via a crafted image, which triggers use after free vulnerabilities. (CVE-2016-9262)

  - Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13     allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion     failure. (CVE-2016-9387)

  - The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause     a denial of service (assertion failure). (CVE-2016-9389)

  - The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a     denial of service (assertion failure) via a crafted image file. (CVE-2016-9390)

  - The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a     denial of service (assertion failure) via a very large integer. (CVE-2016-9391)

  - The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9392)

  - The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9393)

  - The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9394)

  - The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a     denial of service (assertion failure) via a crafted file. (CVE-2016-9395)

  - The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause     a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. (CVE-2016-9396)

  - The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9397)

  - The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a     denial of service (assertion failure) via unspecified vectors. (CVE-2016-9398)

  - The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of     service (assertion failure) via unspecified vectors. (CVE-2016-9399)

  - Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30     allows remote attackers to have unspecified impact via a crafted image. (CVE-2016-9560)

  - An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before     2.0.6 when processing crafted input. (CVE-2016-9583)

  - JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000     image files resulting in a crash on the application using JasPer. (CVE-2016-9591)

  - There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer     2.0.12 that will lead to a remote denial of service attack by triggering an unexpected     jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154. (CVE-2017-13745)

  - There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13747)

  - There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in     base/jas_string.c, that will lead to a remote denial of service attack. (CVE-2017-13748)

  - There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13749)

  - There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13751)

  - There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12     that will lead to a remote denial of service attack. (CVE-2017-13752)

  - JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17,     1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27,     1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8,     2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of     service (heap-based buffer over-read and application crash) via a crafted image, related to the     jas_image_ishomosamp function in libjasper/base/jas_image.c. (CVE-2017-14132)

  - The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a     denial of service (invalid memory read and crash) via a crafted image. (CVE-2017-5504)

  - Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote     attackers to have unspecified impact via a crafted image. (CVE-2017-6852)

  - An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from     jpc_unk_getparms in jpc_cs.c. (CVE-2018-19139)

  - jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read. (CVE-2018-20570)

  - JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when --output-format jp2 is used.
    (CVE-2018-20622)

  - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in     libjasper/jpc/jpc_math.c. (CVE-2018-9055)

  - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in     libjasper/jpc/jpc_enc.c. (CVE-2018-9252)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
94729	SUSE SLES11セキュリティ更新プログラム：jasper（SUSE-SU-2016:2776-1）	Nessus	SuSE Local Security Checks	2016/11/11	2021/1/19	high
195467	RHEL 7 : jasper (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/5/11	2024/5/11	high
94596	openSUSE Security Update : jasper (openSUSE-2016-1263)	Nessus	SuSE Local Security Checks	2016/11/7	2021/1/19	high
94945	openSUSE Security Update : jasper (openSUSE-2016-1309)	Nessus	SuSE Local Security Checks	2016/11/18	2021/1/19	high
94601	openSUSE Security Update : jasper (openSUSE-2016-1270)	Nessus	SuSE Local Security Checks	2016/11/7	2021/1/19	high
94729	SUSE SLES11 Security Update : jasper (SUSE-SU-2016:2776-1)	Nessus	SuSE Local Security Checks	2016/11/11	2021/1/19	high
142231	EulerOS 2.0 SP2 : jasper (EulerOS-SA-2020-2350)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	high
195350	RHEL 6 : jasper (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/5/11	2024/5/11	high
94596	openSUSEセキュリティ更新プログラム：jasper（openSUSE-2016-1263）	Nessus	SuSE Local Security Checks	2016/11/7	2021/1/19	high
94601	openSUSEセキュリティ更新プログラム：jasper（openSUSE-2016-1270）	Nessus	SuSE Local Security Checks	2016/11/7	2021/1/19	high
94945	openSUSEセキュリティ更新プログラム：jasper（openSUSE-2016-1309）	Nessus	SuSE Local Security Checks	2016/11/18	2021/1/19	high
94662	Fedora 24：jasper（2016-e0f0d48142）	Nessus	Fedora Local Security Checks	2016/11/10	2021/1/11	high
94689	Fedora 23：jasper（2016-6c789ba91d）	Nessus	Fedora Local Security Checks	2016/11/11	2021/1/11	high
94728	SUSE SLED12 / SLES12セキュリティ更新プログラム：jasper（SUSE-SU-2016:2775-1）	Nessus	SuSE Local Security Checks	2016/11/11	2021/1/6	high
94662	Fedora 24 : jasper (2016-e0f0d48142)	Nessus	Fedora Local Security Checks	2016/11/10	2021/1/11	high
94689	Fedora 23 : jasper (2016-6c789ba91d)	Nessus	Fedora Local Security Checks	2016/11/11	2021/1/11	high
135522	EulerOS 2.0 SP3 : jasper (EulerOS-SA-2020-1393)	Nessus	Huawei Local Security Checks	2020/4/15	2024/3/18	high
94728	SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2016:2775-1)	Nessus	SuSE Local Security Checks	2016/11/11	2021/1/6	high
195364	RHEL 5 : jasper (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/5/11	2024/5/11	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high