oss-sec mailing list archives

Re:Re: [oss-security] CVE-request: heap-buffer-overflow in jasper

From: xiaoqixue_1 <xiaoqixue_1 () 163 com>
Date: Wed, 21 Jun 2017 16:58:46 +0800 (CST)


At 2017-06-21 16:19:35, "Emilio Pozuelo Monfort" <pochu () debian org> wrote:

Hi,

These days you need to request CVEs by filling the form in
https://cveform.mitre.org/. Please follow up here when you get the CVE.

On 20/06/17 08:31, xiaoqixue_1 wrote:

Timeline:
2017-06-14: bug discovered and reported upstream


How was this reported upstream? Perhaps you could link to the bug report, if
there's one.

We reported it on github :
https://github.com/mdadams/jasper/issues/140

Cheers,
Emilio

Current thread:

CVE-request: heap-buffer-overflow in jasper xiaoqixue_1 (Jun 20)
- Re: CVE-request: heap-buffer-overflow in jasper Emilio Pozuelo Monfort (Jun 21)
  - Re:Re: [oss-security] CVE-request: heap-buffer-overflow in jasper xiaoqixue_1 (Jun 21)
- <Possible follow-ups>
- CVE-request: heap-buffer-overflow in jasper xiaoqixue_1 (Jun 20)