CVE-2016-8882: Null Pointer Dereference
Published Jan 13, 2017
·Updated
The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
Affected Software
2 affected components
debian/jasper
Jasper Project Jasper<=1.900.7
Remediation
Patch Available
Event History
Jan 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-8882?
CVE-2016-8882 has a severity level of medium due to its potential to cause a denial of service.
2
How do I fix CVE-2016-8882?
To fix CVE-2016-8882, update your version of JasPer to at least 1.900.8 or later.
3
What type of attack does CVE-2016-8882 involve?
CVE-2016-8882 involves a denial of service attack resulting from a NULL pointer dereference.
4
What software is affected by CVE-2016-8882?
CVE-2016-8882 affects JasPer versions prior to 1.900.8.
5
Can CVE-2016-8882 be exploited by remote attackers?
Yes, remote attackers can exploit CVE-2016-8882 using specially crafted files.