CVE catalog

CVE-2016-9389

UBUNTU-CVE-2016-9389

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.41% · Oct 25, 2026

The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntujasper14.041.900.1-14vulnerable
Ubuntujasper14.041.900.1-14ubuntu3vulnerable
Ubuntujasper14.041.900.1-14ubuntu3.1vulnerable
Ubuntujasper14.041.900.1-14ubuntu3.2vulnerable
Ubuntujasper14.041.900.1-14ubuntu3.3vulnerable
Ubuntujasper14.041.900.1-14ubuntu3.4vulnerable
Ubuntujasper14.041.900.1-14ubuntu3.5fixed
Ubuntujasper16.041.900.1-debian1-2.4vulnerable
Ubuntujasper16.041.900.1-debian1-2.4ubuntu1vulnerable
Ubuntujasper16.041.900.1-debian1-2.4ubuntu1.1vulnerable
Ubuntujasper16.041.900.1-debian1-2.4ubuntu1.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntujasperdeb14.041.900.1-14ubuntu3.5Not reportedUBUNTU-CVE-2016-9389Not reported
Ubuntujasperdeb16.041.900.1-debian1-2.4ubuntu1.2Not reportedUBUNTU-CVE-2016-9389Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]