Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-6616

Опубликовано: 04 фев. 2018
Источник: redhat
CVSS3: 3.3

Описание

In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

Отчет

This issue did not affect Red Hat Enterprise Linux 7.6 and older versions as they didn't include support for openjpeg2.

Дополнительная информация

Статус:

Low
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=1542321openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 8 лет назад

In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

CVSS3: 5.5
nvd
около 8 лет назад

In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

CVSS3: 5.5
debian
около 8 лет назад

In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_c ...

CVSS3: 5.5
github
больше 3 лет назад

In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

CVSS3: 5.5
fstec
около 8 лет назад

Уязвимость функции opj_t1_encode_cblks библиотеки для кодирования и декодирования изображений OpenJPEG, связанная с ошибкой, приводящей к организации бесконечного цикла, позволяющая нарушителю вызывать отказ в обслуживании

3.3 Low

CVSS3