medium6.5
CVE-2016-9600
JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files.
Impact
JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jasper Project | Jasper | before 2.0.10 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04 |
| Redhat | Enterprise Linux Desktop | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Server | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Server Aus | Versions 7.4, 7.6 |
| Redhat | Enterprise Linux Server Eus | Versions 7.3, 7.4, 7.5, 7.6 |
| Redhat | Enterprise Linux Server Tus | Versions 7.3, 7.6 |
| Redhat | Enterprise Linux Workstation | Versions 6.0, 7.0 |