Every CVESearch/Get API key

CVE-2016-8880

Updated jasper packages fix security vulnerabilities

No scoreRejected

CVE-2016-8880 has been rejected by its source and should not be treated as a live vulnerability, published November 10, 2016.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Affected packages

Affected packages
PackageAffectedFixed
jasper
Mageia:5
From an advisory covering 39 CVEs
before 1.900.23-1.mga5
1.900.23-1.mga5
jasper
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Desktop 12 SP2
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Software Development Kit 12 SP2
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Server 12 SP2
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
jasper
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 20 CVEs
before 1.900.14-181.1
1.900.14-181.1
Show 5 moreShow less
Affected packages
PackageAffectedFixed
jasper
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 19 CVEs
before 1.900.14-134.25.1
1.900.14-134.25.1
jasper
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 19 CVEs
before 1.900.14-134.25.1
1.900.14-134.25.1
jasper
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 19 CVEs
before 1.900.14-134.25.1
1.900.14-134.25.1
jasper
Ubuntu:16.04:LTS
All versions, plus listed versions
1.900.1-debian1-2.41.900.1-debian1-2.4ubuntu11.900.1-debian1-2.4ubuntu1.11.900.1-debian1-2.4ubuntu1.21.900.1-debian1-2.4ubuntu1.3
None known
jasper
openSUSE:Tumbleweed
From an advisory covering 30 CVEs
before 1.900.14-3.1
1.900.14-3.1

What each source reports

CVE ListNo score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2016-8880
Updated
2026-11-02
EUVDEUVD-2016-9705No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
EUVD-2016-9705
Updated
2026-11-03
NVDNo score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2016-8880
Updated
2026-11-02
OSVMGASA-2017-0474No score

Updated jasper packages fix security vulnerabilities

The jasper package has been updated and patched to fix several security issues.

Record
MGASA-2017-0474
Updated
2026-11-02
OSVopenSUSE-SU-2024:10281-1No score

jasper-1.900.14-3.1 on GA media

These are all security issues fixed in the jasper-1.900.14-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10281-1
Updated
2026-11-02
OSVSUSE-SU-2016:2775-1No score

Security update for jasper

This update for jasper to version 1.900.14 fixes several issues.

These security issues were fixed:

  • CVE-2016-8887: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (bsc#1006836)
  • CVE-2016-8886: memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599)
  • CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in bmp_getdata (incomplete fix for CVE-2016-8690) (bsc#1007009)
  • CVE-2016-8883: assert in jpc_dec_tiledecode() (bsc#1006598)
  • CVE-2016-8882: segfault / null pointer access in jpc_pi_destroy (bsc#1006597)
  • CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593)
  • CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591)
  • CVE-2016-8693 Double free vulnerability in mem_close (bsc#1005242)
  • CVE-2016-8691, CVE-2016-8692: Divide by zero in jpc_dec_process_siz (bsc#1005090)
  • CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084)
  • CVE-2016-2116: Memory leak in the jas_iccprof_createfrombuf function in JasPer allowed remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file (bsc#968373)
  • CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983)
  • CVE-2016-1867: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function (bsc#961886)
  • CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553).
  • CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919)
  • CVE-2008-3522: Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf (bsc#392410)
  • jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887) (bsc#1006839)

For additional change description please have a look at the changelog.

Record
SUSE-SU-2016:2775-1
Updated
2026-11-02
OSVSUSE-SU-2016:2776-1No score

Security update for jasper

This update for jasper fixes the following issues:

Security fixes:

  • CVE-2016-8887: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (bsc#1006836)
  • CVE-2016-8886: memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599)
  • CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in bmp_getdata (incomplete fix for CVE-2016-8690) (bsc#1007009)
  • CVE-2016-8883: assert in jpc_dec_tiledecode() (bsc#1006598)
  • CVE-2016-8882: segfault / null pointer access in jpc_pi_destroy (bsc#1006597)
  • CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593)
  • CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591)
  • CVE-2016-8693: Double free vulnerability in mem_close (bsc#1005242)
  • CVE-2016-8691, CVE-2016-8692: Divide by zero in jpc_dec_process_siz (bsc#1005090)
  • CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084)
  • CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983)
  • CVE-2016-1867: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function (bsc#961886)
  • CVE-2016-1577, CVE-2016-2116: double free vulnerability in the jas_iccattrval_destroy function (bsc#968373)
  • CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553)
  • CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919)
  • CVE-2008-3522: multiple integer overflows (bsc#392410)
  • bsc#1006839: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887)
Record
SUSE-SU-2016:2776-1
Updated
2026-11-02
OSVUBUNTU-CVE-2016-8880No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
UBUNTU-CVE-2016-8880
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 55 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open