Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-12973

Опубликовано: 26 июн. 2019
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6openjpegNot affected
Red Hat Enterprise Linux 7openjpegNot affected
Red Hat Enterprise Linux 7openjpeg2Out of support scope
Red Hat Enterprise Linux 8openjpeg2FixedRHSA-2021:425109.11.2021

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=1732270openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c

EPSS

Процентиль: 29%
0.001
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 6 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

CVSS3: 5.5
nvd
около 6 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

CVSS3: 5.5
debian
около 6 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_c ...

CVSS3: 5.5
github
около 3 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

CVSS3: 6.5
fstec
почти 6 лет назад

Уязвимость функции opj_t1_encode_cblks библиотеки для кодирования и декодирования OpenJPEG, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 29%
0.001
Низкий

3.3 Low

CVSS3