CVE-2016-8887: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Null pointer dereference vulnerability in jp2colrdestroy in jp2cod.c was found.
Upstream patch:
https://github.com/mdadams/jasper/commit/e24bdc716c3327b067c551bc6cfb97fd2370358d
CVE assignment:
http://seclists.org/oss-sec/2016/q4/215
— Red Hat
The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8887?
CVE-2016-8887 is classified as a moderate severity vulnerability due to its potential impact on application stability.
How can I fix CVE-2016-8887?
To fix CVE-2016-8887, upgrade to jasper version 1.900.10 or later if you are using Red Hat.
Which software versions are affected by CVE-2016-8887?
CVE-2016-8887 affects jasper versions up to and including 1.900.9 and various Fedora versions.
What type of vulnerability is CVE-2016-8887?
CVE-2016-8887 is a null pointer dereference vulnerability that can lead to application crashes.
In which situations does CVE-2016-8887 occur?
CVE-2016-8887 occurs in the jp2_colr_destroy function within the jp2_cod.c file when handling certain inputs.