CVE-2016-9399
HighSummary
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Risk Assessment
Attackers can exploit this vulnerability to disrupt application functionality, potentially leading to system downtime.
Recommendation
It is recommended to update to the latest version of JasPer to mitigate this vulnerability.
Other vulnerabilities in JasPer 1.900.22
See all- CVE-2017-14229High
There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13, which may lead to a remote denial of service attack.
- CVE-2017-13752High
There is a reachable assertion abort in the function jpc_dequantize() in JasPer 2.0.12 that can lead to a remote denial of service attack.
- CVE-2017-13751High
There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that can lead to a remote denial of service attack.
- CVE-2017-13750High
There is a reachable assertion abort in the function jpc_dec_process_siz() in JasPer 2.0.12 that may lead to a remote denial of service attack.
- CVE-2017-13749High
There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack.
- CVE-2017-13748High
There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.
- CVE-2017-13747High
There is a reachable assertion abort in the function jpc_floorlog2() in JasPer 2.0.12 that can lead to a remote denial of service attack.
- CVE-2017-13746High
There is a reachable assertion abort in the function jpc_dec_process_siz() in JasPer 2.0.12 that can lead to a remote denial of service attack.
- CVE-2017-13745High
There is a reachable assertion abort in the function jpc_dec_process_sot() in JasPer 2.0.12 that can lead to a remote denial of service attack due to an unexpected jpc_ppmstabtostreams return value.
- CVE-2017-1000050High
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
Original NVD description (English source)
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.