SUSE-SU-2017:0953-1: jasper&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:0953-1 is a vulnerability in jasper&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 06-04-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for jasper This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088) - CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497) - CVE-2017-5498: left-shift undefined behaviour (bsc#1020353) - CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868) - CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse9 products
- jasper&distro=SUSE Linux Enterprise Desktop 12 SP1< 1.900.14-194.1
- jasper&distro=SUSE Linux Enterprise Desktop 12 SP2< 1.900.14-194.1
- jasper&distro=SUSE Linux Enterprise Server 12 SP1< 1.900.14-194.1
- jasper&distro=SUSE Linux Enterprise Server 12 SP2< 1.900.14-194.1
- jasper&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 1.900.14-194.1
1 vendor · 9 products