{"schemaVersion":3,"id":"SUSE-SU-2017:1901-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for jasper\n\nThis update for jasper fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2016-9262: Multiple integer overflows in the jas_realloc function in base/jas_malloc.c and\n  mem_resize function in base/jas_stream.c allow remote attackers to cause a denial of service via\n  a crafted image, which triggers use after free vulnerabilities. (bsc#1009994)\n- CVE-2016-9388: The ras_getcmap function in ras_dec.c allows remote attackers to cause a denial\n  of service (assertion failure) via a crafted image file. (bsc#1010975)\n- CVE-2016-9389: The jpc_irct and jpc_iict functions in jpc_mct.c allow remote attackers to cause a\n  denial of service (assertion failure). (bsc#1010968)\n- CVE-2016-9390: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a\n  denial of service (assertion failure) via a crafted image file. (bsc#1010774)\n- CVE-2016-9391: The jpc_bitstream_getbits function in jpc_bs.c allows remote attackers to cause a\n  denial of service (assertion failure) via a very large integer. (bsc#1010782)\n- CVE-2017-1000050: The jp2_encode function in jp2_enc.c allows remote attackers to cause a denial\n  of service. (bsc#1047958)\n\nCVEs already fixed with previous update:\n- CVE-2016-9392: The calcstepsizes function in jpc_dec.c allows remote attackers to cause a denial\n  of service (assertion failure) via a crafted file. (bsc#1010757)\n- CVE-2016-9393: The jpc_pi_nextrpcl function in jpc_t2cod.c allows remote attackers to cause a\n  denial of service (assertion failure) via a crafted file. (bsc#1010766)\n- CVE-2016-9394: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a\n  denial of service (assertion failure) via a crafted file. (bsc#1010756)","dates":{"published":"2017-07-19T20:44:00.000Z","modified":"2026-02-04T02:36:00.978Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"jasper&distro=SUSE Linux Enterprise Server 11 SP4","name":"jasper","label":"jasper&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jasper&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 1.900.14-134.33.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.900.14-134.33.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"jasper&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"jasper","label":"jasper&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jasper&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 1.900.14-134.33.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.900.14-134.33.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"jasper&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"jasper","label":"jasper&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jasper&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 1.900.14-134.33.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.900.14-134.33.3.1","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171901-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171901-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1009994","label":"bugzilla.suse.com/1009994","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1010756","label":"bugzilla.suse.com/1010756","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1010757","label":"bugzilla.suse.com/1010757","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1010766","label":"bugzilla.suse.com/1010766","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1010774","label":"bugzilla.suse.com/1010774","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1010782","label":"bugzilla.suse.com/1010782","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1010968","label":"bugzilla.suse.com/1010968","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1010975","label":"bugzilla.suse.com/1010975","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1047958","label":"bugzilla.suse.com/1047958","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9262","label":"www.suse.com/security/cve/CVE-2016-9262","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9388","label":"www.suse.com/security/cve/CVE-2016-9388","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9389","label":"www.suse.com/security/cve/CVE-2016-9389","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9390","label":"www.suse.com/security/cve/CVE-2016-9390","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9391","label":"www.suse.com/security/cve/CVE-2016-9391","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9392","label":"www.suse.com/security/cve/CVE-2016-9392","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9393","label":"www.suse.com/security/cve/CVE-2016-9393","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9394","label":"www.suse.com/security/cve/CVE-2016-9394","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000050","label":"www.suse.com/security/cve/CVE-2017-1000050","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2016-9262","CVE-2016-9388","CVE-2016-9389","CVE-2016-9390","CVE-2016-9391","CVE-2016-9392","CVE-2016-9393","CVE-2016-9394","CVE-2017-1000050"],"downstream":[],"duplicates":[],"related":["CVE-2016-9262","CVE-2016-9388","CVE-2016-9389","CVE-2016-9390","CVE-2016-9391","CVE-2016-9392","CVE-2016-9393","CVE-2016-9394","CVE-2017-1000050"]},"timeline":[{"kind":"published","date":"2017-07-19T20:44:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:36:00.978Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:59:07.518Z","stale":false,"partial":false}}