Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-21010

Опубликовано: 05 сент. 2019
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.8

Описание

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system openjpeg
devel

not-affected

uses system openjpeg
disco

not-affected

uses system openjpeg
eoan

not-affected

uses system openjpeg
esm-apps/bionic

not-affected

uses system openjpeg
esm-apps/focal

not-affected

uses system openjpeg
esm-apps/jammy

not-affected

uses system openjpeg
esm-apps/noble

not-affected

uses system openjpeg
esm-apps/xenial

not-affected

uses system openjpeg
esm-infra-legacy/trusty

not-affected

uses system openjpeg

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not compiled
devel

not-affected

uses system openjpeg2
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

code not compiled
esm-infra/focal

not-affected

uses system openjpeg2
esm-infra/xenial

not-affected

code not compiled
focal

not-affected

uses system openjpeg2
groovy

not-affected

uses system openjpeg2
hirsute

not-affected

uses system openjpeg2
impish

not-affected

uses system openjpeg2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needs-triage

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/xenial

ignored

changes too intrusive
esm-infra-legacy/trusty

ignored

changes too intrusive
esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

2.3.1-1
disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

released

2.3.0-2+deb10u1
esm-apps/xenial

released

2.1.2-1.1+deb9u5build0.16.04.1
esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

2.3.1-1
focal

not-affected

2.3.1-1
groovy

not-affected

2.3.1-1

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

Показывать по

EPSS

Процентиль: 74%
0.00846
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
больше 6 лет назад

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

CVSS3: 8.8
nvd
больше 6 лет назад

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

CVSS3: 8.8
debian
больше 6 лет назад

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_pr ...

CVSS3: 8.8
github
больше 3 лет назад

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

CVSS3: 8.8
fstec
больше 6 лет назад

Уязвимость функции color_apply_icc_profile (bin/common/color.c) библиотеки для кодирования и декодирования OpenJPEG, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 74%
0.00846
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3