| Name | CVE-2016-8692 |
| Description | The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer ... |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-739-1, DSA-3785-1 |
| Debian Bugs | 841111 |
The information below is based on the following data on fixed versions.
Notes
https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/
Fixed by: https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020 (version-1.900.4)
Not suitable for code injection, hardly denial of service