Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-12973

Опубликовано: 26 июн. 2019
Источник: ubuntu
Приоритет: low
CVSS2: 4.3
CVSS3: 5.5

Описание

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

cosmic

ignored

devel

ignored

disco

ignored

eoan

ignored

esm-apps/bionic

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system openjpeg
cosmic

ignored

end of life
devel

not-affected

uses system openjpeg
disco

not-affected

uses system openjpeg
eoan

not-affected

uses system openjpeg
esm-apps/bionic

not-affected

uses system openjpeg
esm-apps/focal

not-affected

uses system openjpeg
esm-apps/jammy

not-affected

uses system openjpeg
esm-apps/noble

not-affected

uses system openjpeg
esm-apps/xenial

not-affected

uses system openjpeg

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not compiled
devel

not-affected

uses system openjpeg2
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

code not compiled
esm-infra/focal

not-affected

uses system openjpeg2
esm-infra/xenial

not-affected

code not compiled
focal

not-affected

uses system openjpeg2
groovy

not-affected

uses system openjpeg2
hirsute

not-affected

uses system openjpeg2
impish

not-affected

uses system openjpeg2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

released

2.3.1-1ubuntu4
disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

released

2.3.0-2+deb10u2ubuntu0.1~esm1
esm-apps/xenial

released

2.1.2-1.1+deb9u5build0.16.04.1
esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

2.3.1-1ubuntu4
focal

released

2.3.1-1ubuntu4

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

Показывать по

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
около 6 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

CVSS3: 5.5
nvd
около 6 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

CVSS3: 5.5
debian
около 6 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_c ...

CVSS3: 5.5
github
около 3 лет назад

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

CVSS3: 6.5
fstec
почти 6 лет назад

Уязвимость функции opj_t1_encode_cblks библиотеки для кодирования и декодирования OpenJPEG, позволяющая нарушителю вызвать отказ в обслуживании

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Уязвимость CVE-2019-12973