suse · CVE-2016-9398

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-9398 severity moderate: SUSE including 48 source package names (jasper, jasper-1.900.14-3.1, …), 105 product×package rows across 63 product lines (Image SLES12-SP5-Azure-SAP-BYOS, Image SLES12-SP5-Azure-SAP-On-Demand, … (63 product lines)): Fixed 98, Known Not Affected 7.

Description:

The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.