Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-17479

Опубликовано: 08 дек. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/xenial

released

1:1.5.2-3.1ubuntu0.1~esm2
esm-infra-legacy/trusty

needed

esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

DNE

lunar

DNE

mantic

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

released

2.3.0-2build0.18.04.1
cosmic

ignored

end of life
devel

not-affected

2.5.0-1
disco

ignored

end of life
esm-apps/bionic

released

2.3.0-2build0.18.04.1
esm-apps/xenial

released

2.1.2-1.1+deb9u3build0.16.04.1
esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

2.3.1-1ubuntu4
focal

not-affected

2.3.1-1ubuntu4

Показывать по

EPSS

Процентиль: 90%
0.05391
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
около 8 лет назад

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

CVSS3: 9.8
nvd
около 8 лет назад

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

CVSS3: 9.8
debian
около 8 лет назад

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the ...

CVSS3: 9.8
github
больше 3 лет назад

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

suse-cvrf
больше 7 лет назад

Security update for openjpeg2

EPSS

Процентиль: 90%
0.05391
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3