Oval Definition:oval:com.ubuntu.xenial:def:20168884000
Revision Date:2017-03-28Version:1
Title:CVE-2016-8884 on Ubuntu 16.04 LTS (xenial) - medium.
Description:The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-8884
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND The 'jasper' package in xenial was vulnerable but has been fixed (note: '1.900.1-debian1-2.4ubuntu1.1').
    • BACK