CVE-2016-3183

Опубликовано: 03 фев. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.

Ссылки

http://www.openwall.com/lists/oss-security/2016/03/16/17
Mailing List
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1317821
Issue Tracking
Patch
https://github.com/uclouvain/openjpeg/commit/15f081c89650dccee4aa4ae66f614c3fdb268767
Issue Tracking
Patch
Third Party Advisory
https://github.com/uclouvain/openjpeg/issues/726
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FFMOZOF2EI6N2CR23EQ5EATWLQKBMHW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJM23YERMEC6LCTWBUH7LZURGSLZDFDH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFRD35RIPRCGZA5DKAKHZ62LMP2A5UT7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPMDEUIMHTLKMHELDL4F4HZ7X4Y34JEB/
https://security.gentoo.org/glsa/201612-26
Patch
Third Party Advisory
VDB Entry
https://www.oracle.com/security-alerts/cpujul2020.html
http://www.openwall.com/lists/oss-security/2016/03/16/17
Mailing List
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1317821
Issue Tracking
Patch
https://github.com/uclouvain/openjpeg/commit/15f081c89650dccee4aa4ae66f614c3fdb268767
Issue Tracking
Patch
Third Party Advisory
https://github.com/uclouvain/openjpeg/issues/726
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FFMOZOF2EI6N2CR23EQ5EATWLQKBMHW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJM23YERMEC6LCTWBUH7LZURGSLZDFDH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFRD35RIPRCGZA5DKAKHZ62LMP2A5UT7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPMDEUIMHTLKMHELDL4F4HZ7X4Y34JEB/
https://security.gentoo.org/glsa/201612-26
Patch
Third Party Advisory
VDB Entry
https://www.oracle.com/security-alerts/cpujul2020.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*

Версия до 2.1.0 (включая)

EPSS

Процентиль: 33%

0.00129

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2016-3183

CVSS3: 5.5

ubuntu

около 9 лет назад

The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.

CVE-2016-3183

redhat

почти 10 лет назад

The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.

CVE-2016-3183

CVSS3: 5.5

debian

около 9 лет назад

The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 ...

GHSA-55fp-6c46-gr3x

CVSS3: 5.5

github

больше 3 лет назад

The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.

SUSE-SU-2022:1129-1

suse-cvrf

почти 4 года назад

Security update for openjpeg2

EPSS

Процентиль: 33%

0.00129

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125