Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-6988

Опубликовано: 28 янв. 2019
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

not-affected

uses system openjpeg2
esm-infra-legacy/trusty

DNE

esm-infra-legacy/xenial

deferred

esm-infra/bionic

deferred

esm-infra/focal

not-affected

uses system openjpeg2
esm-infra/xenial

ignored

end of ESM support, was deferred
focal

not-affected

uses system openjpeg2
groovy

not-affected

uses system openjpeg2
hirsute

not-affected

uses system openjpeg2

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps-legacy/xenial

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
cosmic

ignored

end of life
devel

deferred

disco

ignored

end of life
eoan

ignored

end of life
esm-apps-legacy/xenial

deferred

esm-apps/bionic

deferred

esm-apps/xenial

ignored

end of ESM support, was deferred
esm-infra-legacy/trusty

DNE

esm-infra/focal

deferred

Показывать по

EPSS

Процентиль: 76%
0.01724
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.5
redhat
больше 7 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

CVSS3: 6.5
nvd
больше 7 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

CVSS3: 6.5
debian
больше 7 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers ...

CVSS3: 6.5
github
больше 4 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

EPSS

Процентиль: 76%
0.01724
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3