CVE-2016-2116: Medium severity ubuntu vulnerability
Memory leak in jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier was found, allowing remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.
Vulnerable code:
src/libjasper/base/jasicc.c: 1685 jasiccproft jasiccprofcreatefrombuf(uchar buf, int len) 1686 { 1687 jasstreamt in; 1688 jasiccproft prof; 1689 if (!(in = jasstreammemopen(JASCAST(char , buf), len))) 1690 goto error; 1691 if (!(prof = jasiccprofload(in))) 1692 goto error; 1693 jasstreamclose(in); 1694 return prof; 1695 error: 1696 return 0; 1697 }
jasstreamt allocated by the call to jasstreammemopen() is leaked if jasiccprofload() fails on line 1691.
Proposed patch:
http://seclists.org/oss-sec/2016/q1/att-507/CVE-2016-2116.patch
Public via (contains crash report):
http://seclists.org/oss-sec/2016/q1/507
Other sources
Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2116?
CVE-2016-2116 has a severity rating that indicates it can lead to denial of service due to memory leaks.
How do I fix CVE-2016-2116?
To fix CVE-2016-2116, upgrade your JasPer installation to version 1.900.2 or later.
Which software is affected by CVE-2016-2116?
CVE-2016-2116 affects JasPer versions 1.900.1 and earlier, as well as specific versions of Ubuntu Linux.
Can CVE-2016-2116 be exploited remotely?
Yes, CVE-2016-2116 can be exploited remotely through a crafted ICC color profile in a JPEG 2000 image file.
What are the consequences of CVE-2016-2116?
The primary consequence of CVE-2016-2116 is a denial of service caused by excessive memory consumption.