CVE-2016-8886: Buffer Overflow
Published Oct 26, 2016
·Updated
Memory allocation failure in jasmalloc triggered by crafted file was found.
CVE assignment:
http://seclists.org/oss-sec/2016/q4/214
Other sources
The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
— MITRE
Affected Software
2 affected componentsFixes available
redhat/jasper<1.900.11
1.900.11
Jasper Project Jasper<=1.900.10
Event History
Mar 23, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-8886?
CVE-2016-8886 is classified as a medium severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2016-8886?
To fix CVE-2016-8886, upgrade to JasPer version 1.900.11 or later.
3
What kind of attack is associated with CVE-2016-8886?
CVE-2016-8886 allows attackers to exploit memory allocation failures through crafted files.
4
Which software versions are affected by CVE-2016-8886?
CVE-2016-8886 affects JasPer versions prior to 1.900.11.
5
Is CVE-2016-8886 a local or remote vulnerability?
CVE-2016-8886 is a remote vulnerability that can be exploited by attackers over the network.