Vulnerability CVE-2016-9387

Vulnerability Name:

CVE-2016-9387 (CCN-123681)

Assigned:

2016-10-23

Published:

2016-10-23

Updated:

2018-06-29

Summary:

Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

2.5 Low (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)
2.2 Low (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

2.6 Low (REDHAT CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-190

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2016-9387

Source: CCN
Type: IBM Security Bulletin T1025260 (PowerKVM)
Vulnerabilities in JasPer affect PowerKVM

Source: CCN
Type: IBM Security Bulletin T1025538 (SmartCloud Entry)
Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry

Source: CCN
Type: oss-sec Mailing List, Thu, 17 Nov 2016 02:56:39 -0500
Re: jasper: multiple assertion failures

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20161117 Re: jasper: multiple assertion failures

Source: BID
Type: Third Party Advisory, VDB Entry
94374

Source: CCN
Type: BID-94374
JasPer CVE-2016-9387 Integer Overflow Vulnerability

Source: REDHAT
Type: UNKNOWN
RHSA-2017:1208

Source: MISC
Type: Third Party Advisory
https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1396959

Source: XF
Type: UNKNOWN
jasper-cve20169387-dos(123681)

Source: CCN
Type: JasPer GIT Repository
Fixed another integer overflow problem.

Source: CONFIRM
Type: Issue Tracking, Patch, Vendor Advisory
https://github.com/mdadams/jasper/commit/d91198abd00fc435a397fe6bad906a4c1748e9cf

Source: UBUNTU
Type: UNKNOWN
USN-3693-1

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2016-9387

Vulnerable Configuration:

Configuration 1:

cpe:/a:jasper_project:jasper:*:*:*:*:*:*:*:* (Version <= 1.900.12)

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

Configuration RedHat 7:

cpe:/o:redhat:enterprise_linux:7::client:*:*:*:*:*

Configuration RedHat 8:

cpe:/o:redhat:enterprise_linux:7::computenode:*:*:*:*:*

Configuration RedHat 9:

cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

Configuration RedHat 10:

cpe:/o:redhat:enterprise_linux:7::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/a:jasper_project:jasper:1.900.12:*:*:*:*:*:*:*

AND

cpe:/a:ibm:smartcloud_entry:3.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:smartcloud_entry:3.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:smartcloud_entry:2.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:smartcloud_entry:2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:powerkvm:2.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:powerkvm:3.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20169387	V	CVE-2016-9387	2023-06-22
oval:org.opensuse.security:def:7602	P	libjasper4-2.0.14-150000.3.28.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7940	P	libjasper-devel-2.0.14-150000.3.28.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:776	P	Security update for rubygem-rack (Moderate)	2022-09-23
oval:org.opensuse.security:def:436	P	Security update for mupdf (Moderate)	2022-09-17
oval:org.opensuse.security:def:737	P	Security update for ImageMagick (Moderate)	2022-09-06
oval:org.opensuse.security:def:666	P	Security update for u-boot (Important)	2022-08-03
oval:org.opensuse.security:def:3017	P	audiofile-0.3.6-11.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3319	P	pam_u2f-1.0.8-3.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:1702	P	Security update for salt (Important)	2022-06-24
oval:org.opensuse.security:def:94949	P	libjasper-devel-2.0.14-150000.3.25.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94647	P	libjasper4-2.0.14-150000.3.25.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:143	P	libjasper4-2.0.14-3.19.1 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:152	P	liblua5_3-5-32bit-5.3.4-3.3.2 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:1072	P	Security update for fribidi (Moderate)	2022-05-25
oval:org.opensuse.security:def:1358	P	Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3) (Important)	2022-05-23
oval:org.opensuse.security:def:100770	P	(Important)	2022-03-15
oval:org.opensuse.security:def:94057	P	(Moderate)	2022-03-04
oval:org.opensuse.security:def:1586	P	Security update for samba (Critical)	2022-02-08
oval:org.opensuse.security:def:1230	P	Security update for java-1_8_0-ibm (Important)	2022-01-18
oval:org.opensuse.security:def:112453	P	jasper-2.0.33-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:49124	P	Security update for containerd, docker, runc (Important)	2021-10-12
oval:org.opensuse.security:def:105957	P	jasper-2.0.33-1.2 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:71263	P	libidn2-0-2.0.4-1.23 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71266	P	libjasper4-2.0.14-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:103335	P	libjasper4-2.0.14-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:89680	P	libjasper4-2.0.14-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:61525	P	libjasper4-2.0.14-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96645	P	libjasper4-2.0.14-3.3.2 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:71150	P	binutils-2.31-5.31 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:69724	P	Security update for xerces-c (Important)	2021-09-02
oval:org.opensuse.security:def:64563	P	Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (Moderate)	2021-08-23
oval:org.opensuse.security:def:47312	P	libXcursor1-1.1.14-3.59 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48358	P	zypper-1.13.51-21.26.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47672	P	libXcursor1-1.1.14-4.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47658	P	krb5-1.12.5-40.28.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47648	P	jakarta-commons-fileupload-1.1.1-120.113 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47433	P	libxcb-dri2-0-1.10-3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47734	P	libldap-2_4-2-2.4.41-18.40.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46957	P	gpg2-2.0.24-3.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47872	P	python3-requests-2.7.0-2.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47740	P	libmicrohttpd10-0.9.30-5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47626	P	gnome-shell-search-provider-nautilus-3.20.3-23.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47799	P	libudisks2-0-2.1.3-1.13 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46958	P	gpgme-1.5.1-1.11 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47956	P	audiofile-0.3.6-11.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47888	P	socat-1.7.2.4-3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47758	P	libospf0-1.1.1-17.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47002	P	libXvMC1-1.0.8-3.56 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47830	P	mozilla-nspr-32bit-4.13.1-18.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46972	P	jakarta-commons-fileupload-1.1.1-120.113 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48018	P	giflib-progs-5.0.5-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47187	P	xorg-x11-libs-7.6-45.14 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48102	P	libcroco-0_6-3-0.6.11-12.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47850	P	perl-DBD-mysql-4.021-12.5.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47134	P	python-2.7.9-24.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47901	P	tar-1.27.1-15.3.7 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47093	P	libvncclient0-0.9.9-16.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48083	P	libXrandr2-1.5.0-6.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47188	P	xorg-x11-server-7.6_1.18.3-57.34 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48186	P	libraptor2-0-2.0.10-3.63 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47998	P	e2fsprogs-1.43.8-3.8.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47226	P	cpp48-4.8.5-30.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47286	P	hardlink-1.0-6.38 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48114	P	libgcab-1_0-0-0.6-1.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47202	P	apache-commons-httpclient-3.1-4.364 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48248	P	openslp-2.0.0-18.20.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47297	P	java-1_8_0-openjdk-1.8.0.131-26.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48212	P	libupsclient1-2.7.4-3.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47374	P	libmicrohttpd10-0.9.30-5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47418	P	libtcnative-1-0-1.1.34-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48185	P	libquicktime0-1.2.4-14.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47323	P	libXtst6-1.2.2-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48313	P	stunnel-5.00-4.3.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47298	P	kbd-1.15.5-8.7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48296	P	rrdtool-1.4.7-21.3.27 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47588	P	cvs-1.12.12-182.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47510	P	syslog-service-2.0-778.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47516	P	tomcat-8.0.43-23.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48344	P	xfsprogs-4.15.0-1.12 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:1002	P	grep-3.1-4.3.12 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62161	P	libjasper4-2.0.14-3.19.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62791	P	libjasper-devel-2.0.14-3.19.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1112	P	libpoppler-cpp0-0.79.0-3.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100919	P	libjasper4-2.0.14-3.19.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101197	P	libjasper-devel-2.0.14-3.19.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:71902	P	libjasper4-2.0.14-3.19.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72510	P	libjasper-devel-2.0.14-3.19.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:49443	P	Security update for nodejs10 (Important)	2021-07-14
oval:org.opensuse.security:def:70982	P	libjasper4-2.0.14-1.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46674	P	gv-3.7.4-1.39 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48415	P	fetchmail-6.3.26-12.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48423	P	gdk-pixbuf-loader-rsvg-2.40.15-4.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46688	P	kbd-1.15.5-8.4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48823	P	argyllcms-1.6.3-3.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48454	P	krb5-1.12.5-39.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48877	P	libwmf-0_2-7-0.2.8.4-242.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61241	P	libjasper4-2.0.14-1.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46809	P	pam_ssh-2.0-1.40 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48525	P	libmusicbrainz4-2.1.5-27.79 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:70923	P	gtk2-devel-2.24.32-2.27 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:71036	P	libudisks2-0-2.6.5-1.47 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46673	P	guestfs-data-1.26.10-4.27 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48539	P	libpoppler44-0.24.4-12.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48593	P	pcsc-ccid-1.4.14-1.42 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:1468	P	Security update for libwebp (Critical)	2021-06-04
oval:org.opensuse.security:def:64476	P	Security update for sudo (Important)	2021-04-20
oval:org.opensuse.security:def:69829	P	Security update for clamav (Important)	2021-04-14
oval:org.opensuse.security:def:69988	P	Security update for python-Jinja2 (Important)	2021-02-26
oval:org.opensuse.security:def:93793	P	(Moderate)	2021-02-22
oval:org.opensuse.security:def:67810	P	Security update for the Linux Kernel (Live Patch 18 for SLE 15) (Important)	2021-02-10
oval:org.opensuse.security:def:66737	P	Security update for the Linux Kernel (Moderate)	2021-01-14
oval:org.opensuse.security:def:107172	P	libjasper4-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72166	P	libjasper-devel-2.0.14-1.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107436	P	libjasper-devel-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62447	P	libjasper-devel-2.0.14-1.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72276	P	libjasper-devel-2.0.14-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:116730	P	libjasper4-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:71567	P	libjasper4-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62557	P	libjasper-devel-2.0.14-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72394	P	libjasper-devel-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:116994	P	libjasper-devel-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:103562	P	libjasper-devel-2.0.14-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:89907	P	libjasper-devel-2.0.14-3.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61826	P	libjasper4-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:100506	P	libjasper4-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62675	P	libjasper-devel-2.0.14-3.11.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49499	P	PackageKit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:67910	P	libjasper-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49553	P	libjasper-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:66381	P	elfutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73046	P	btrfsmaintenance on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:66473	P	libjasper4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49617	P	emacs-x11 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49671	P	libjasper-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73164	P	libjasper4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:66645	P	update-alternatives on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73310	P	rpm-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49178	P	libjasper4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64249	P	fetchmail on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:70093	P	libjasper-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64336	P	libjasper4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73428	P	libjasper-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:67583	P	cyrus-sasl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49389	P	accountsservice on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:67683	P	libjasper4 on GA media (Moderate)	2020-12-01
oval:com.redhat.rhsa:def:20171208	P	RHSA-2017:1208: jasper security update (Important)	2017-05-09
oval:com.ubuntu.precise:def:20169387000	V	CVE-2016-9387 on Ubuntu 12.04 LTS (precise) - low.	2017-03-23
oval:com.ubuntu.xenial:def:201693870000000	V	CVE-2016-9387 on Ubuntu 16.04 LTS (xenial) - negligible.	2017-03-23
oval:com.ubuntu.trusty:def:20169387000	V	CVE-2016-9387 on Ubuntu 14.04 LTS (trusty) - negligible.	2017-03-23
oval:com.ubuntu.xenial:def:20169387000	V	CVE-2016-9387 on Ubuntu 16.04 LTS (xenial) - negligible.	2017-03-23

BACK