CVE-2016-8690

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

Database specific

{
    "unresolved_ranges": [
        {
            "vendor_product": "fedoraproject:fedora",
            "extracted_events": [
                {
                    "last_affected": "23"
                }
            ],
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD"
        }
    ]
}

References

CVE-2016-8690

Affected packages