Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-6988

Опубликовано: 28 янв. 2019
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

not-affected

uses system openjpeg2
esm-infra-legacy/trusty

DNE

esm-infra/bionic

deferred

esm-infra/focal

not-affected

uses system openjpeg2
esm-infra/xenial

deferred

focal

not-affected

uses system openjpeg2
groovy

not-affected

uses system openjpeg2
hirsute

not-affected

uses system openjpeg2
impish

not-affected

uses system openjpeg2

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
cosmic

ignored

end of life
devel

deferred

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

deferred

esm-apps/xenial

deferred

esm-infra-legacy/trusty

DNE

esm-infra/focal

deferred

focal

ignored

end of standard support, was deferred

Показывать по

EPSS

Процентиль: 55%
0.00327
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.5
redhat
около 7 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

CVSS3: 6.5
nvd
около 7 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

CVSS3: 6.5
debian
около 7 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.

EPSS

Процентиль: 55%
0.00327
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3