CVE-2016-9580

Опубликовано: 01 авг. 2018

Источник: nvd

CVSS3: 3.3

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

Ссылки

http://www.securityfocus.com/bid/94822
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9580
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/szukw000/openjpeg/commit/cadff5fb6e73398de26a92e96d3d7cac893af255
Patch
Third Party Advisory
https://github.com/uclouvain/openjpeg/issues/871
Exploit
Third Party Advisory
https://security.gentoo.org/glsa/201710-26
Third Party Advisory
http://www.securityfocus.com/bid/94822
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9580
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/szukw000/openjpeg/commit/cadff5fb6e73398de26a92e96d3d7cac893af255
Patch
Third Party Advisory
https://github.com/uclouvain/openjpeg/issues/871
Exploit
Third Party Advisory
https://security.gentoo.org/glsa/201710-26
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uclouvain:openjpeg:2.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00396

Низкий

3.3 Low

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-122

CWE-190

Связанные уязвимости

CVE-2016-9580

CVSS3: 3.3

ubuntu

больше 7 лет назад

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

CVE-2016-9580

CVSS3: 3.3

redhat

около 9 лет назад

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

CVE-2016-9580

CVSS3: 3.3

debian

больше 7 лет назад

An integer overflow vulnerability was found in tiftoimage function in ...

GHSA-xhm3-jc6v-q54x

CVSS3: 8.8

github

больше 3 лет назад

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

openSUSE-SU-2017:0207-1

suse-cvrf

около 9 лет назад

Security update for openjpeg2

EPSS

Процентиль: 60%

0.00396

Низкий

3.3 Low

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-122

CWE-190