Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9573

Опубликовано: 02 нояб. 2016
Источник: redhat
CVSS3: 6.5
CVSS2: 4.3
EPSS Низкий

Описание

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.

An out-of-bounds read vulnerability was found in OpenJPEG, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6openjpegNot affected
Red Hat Enterprise Linux 7openjpegFixedRHSA-2017:083823.03.2017

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1402711openjpeg: heap out-of-bounds read due to insufficient check in imagetopnm()

EPSS

Процентиль: 78%
0.01115
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.

CVSS3: 6.5
nvd
больше 7 лет назад

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.

CVSS3: 6.5
debian
больше 7 лет назад

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in th ...

CVSS3: 8.1
github
больше 3 лет назад

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.

oracle-oval
больше 8 лет назад

ELSA-2017-0838: openjpeg security update (MODERATE)

EPSS

Процентиль: 78%
0.01115
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2