Known vulnerabilities in libjasper1 (Ubuntu package) 1.900.1-14

Vendor: Canonical Ltd.

Software: libjasper1 (Ubuntu package)

Version: 1.900.1-14

Software CPE: cpe:2.3:o:canonical:libjasper1_ubuntu_package:*:*:*:*:*:ubuntu:*:*

Website: https://www.ubuntu.com/

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU33253 - Missing release of memory after effective lifetime CVE-2016-2116	CWE-401	Medium	No	No	1.900.1-13ubuntu0.3, 1.900.1-14ubuntu3.3, 1.900.1-debian1-2.4ubuntu0.15.10.1	13.04.2016	SB2016041320 SB2016031110 SB2016030314
#VU33251 - Improper input validation CVE-2016-1577	CWE-20	Medium	No	No	1.900.1-13ubuntu0.3, 1.900.1-14ubuntu3.3, 1.900.1-debian1-2.4ubuntu0.15.10.1	13.04.2016	SB2016041319 SB2016031108 SB2016030314
#VU33267 - Stack-based buffer overflow CVE-2014-8158	CWE-121	Medium	No	No	1.900.1-13ubuntu0.2, 1.900.1-14ubuntu3.2, 1.900.1-debian1-2ubuntu0.2	26.01.2015	SB2015012605 SB2015092106 SB2015021106 and 7 more
#VU33266 - Heap-based Buffer Overflow CVE-2014-8157	CWE-122	Medium	No	No	1.900.1-13ubuntu0.2, 1.900.1-14ubuntu3.2, 1.900.1-debian1-2ubuntu0.2	26.01.2015	SB2015012604 SB2015092105 SB2015021106 and 7 more
#VU33265 - Heap-based Buffer Overflow CVE-2014-8138	CWE-122	Medium	No	No	1.900.1-13ubuntu0.2, 1.900.1-14ubuntu3.2, 1.900.1-debian1-2ubuntu0.2	24.12.2014	SB2014122402 SB2015092104 SB2015010803 and 7 more
#VU33250 - Improper input validation CVE-2014-8137	CWE-20	Medium	No	No	1.900.1-13ubuntu0.2, 1.900.1-14ubuntu3.2, 1.900.1-debian1-2ubuntu0.2	24.12.2014	SB2014122401 SB2015092102 SB2015010803 and 7 more
#VU33784 - Improper input validation CVE-2014-9029	CWE-20	Medium	No	No	1.900.1-13ubuntu0.1, 1.900.1-14ubuntu3.1, 1.900.1-debian1-2ubuntu0.1	08.12.2014	SB2014120836 SB2015012901 SB2015010803 and 7 more