CVE-2016-10250: Null Pointer Dereference
Published Mar 15, 2017
·Updated
Last updated 24 July 2024
Other sources
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
Affected Software
2 affected components
debian/jasper
Jasper Project Jasper<=1.900.12
Remediation
Event History
Mar 15, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:15 PM
Description
Sep 14, 2024
Data Sourced
via Ubuntu·03:56 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-10250?
CVE-2016-10250 is classified as a denial of service vulnerability.
2
How do I fix CVE-2016-10250?
To fix CVE-2016-10250, update the Jasper library to version 1.900.13 or later.
3
What software is affected by CVE-2016-10250?
CVE-2016-10250 affects the JasPer library versions before 1.900.13.
4
Can CVE-2016-10250 be exploited remotely?
Yes, CVE-2016-10250 can be exploited remotely by attackers to cause a denial of service.
5
What causes the vulnerability in CVE-2016-10250?
The vulnerability in CVE-2016-10250 is caused by incorrect cleanup of JP2 box data during error handling.