Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201612-26
HistoryDec 08, 2016 - 12:00 a.m.

OpenJPEG: Multiple vulnerabilities

2016-12-0800:00:00
Gentoo Foundation
security.gentoo.org
33

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.011 Low

EPSS

Percentile

84.7%

JSON

Background

OpenJPEG is an open-source JPEG 2000 library.

Description

Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted JPEG file, possibly resulting in execution of arbitrary code or a Denial of Service condition. Furthermore, a remote attacker may be able to obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All OpenJPEG 2 users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=media-libs/openjpeg-2.1.1_p20160922:2"
OSVersionArchitecturePackageVersionFilename
Gentooanyallmedia-libs/openjpeg< 2.1.1_p20160922UNKNOWN

Related

nessus 28
fedora 10
openvas 29
ubuntucve 6
cve 7
nvd 7
prion 7
mageia 2
debian 1
cvelist 7
debiancve 6
hackerone 3
osv 3
rosalinux 1
suse 6
ubuntu 1
androidsecurity 1
oracle 1
nessus
nessus
GLSA-201612-26 : OpenJPEG: Multiple vulnerabilities
2016-12-08 00:00:00
Fedora 24 : mingw-openjpeg2 (2016-8fa7ced365)
2016-07-19 00:00:00
Fedora 23 : openjpeg2 (2016-d2ab705e4a)
2016-07-18 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: mingw-openjpeg2-2.1.1-1.fc24
2016-07-18 18:37:00
[SECURITY] Fedora 23 Update: openjpeg2-2.1.1-1.fc23
2016-07-16 21:21:40
[SECURITY] Fedora 23 Update: mingw-openjpeg2-2.1.1-1.fc23
2016-07-18 21:00:23
openvas
openvas
Fedora Update for openjpeg2 FEDORA-2016-abdc548f46
2016-08-02 00:00:00
Fedora Update for openjpeg2 FEDORA-2016-d2ab705e4a
2016-08-02 00:00:00
Fedora Update for mingw-openjpeg2 FEDORA-2016-14d8f9b4ed
2016-08-02 00:00:00
ubuntucve
ubuntucve
CVE-2016-1923
2016-01-27 00:00:00
CVE-2015-8871
2016-09-21 00:00:00
CVE-2016-7445
2016-10-03 00:00:00
cve
cve
CVE-2016-3181
2020-02-20 01:15:10
CVE-2015-8871
2016-09-21 14:25:00
CVE-2016-7445
2016-10-03 16:09:17
nvd
nvd
CVE-2016-3181
2020-02-20 01:15:10
CVE-2015-8871
2016-09-21 14:25:00
CVE-2016-7445
2016-10-03 16:09:17
prion
prion
Design/Logic Flaw
2020-02-20 01:15:00
Design/Logic Flaw
2016-09-21 14:25:00
Null pointer dereference
2016-10-03 16:09:00
mageia
mageia
Updated openjpeg2 packages fix security vulnerabilities
2016-11-03 12:02:50
Updated openjpeg packages fix security vulnerability
2016-10-23 11:49:50
debian
debian
[SECURITY] [DSA 3665-1] openjpeg2 security update
2016-09-11 18:05:19
cvelist
cvelist
CVE-2015-8871
2016-09-21 14:00:00
CVE-2016-7445
2016-10-03 16:00:00
CVE-2016-1924
2016-01-27 20:00:00
debiancve
debiancve
CVE-2015-8871
2016-09-21 14:25:00
CVE-2016-7445
2016-10-03 16:09:17
CVE-2016-1923
2016-01-27 20:59:01
hackerone
hackerone
Internet Bug Bounty: CVE-2016-1924 OpenJPEG opj_tgt_reset Out-of-Bounds Read Vulnerability
2016-09-13 08:54:54
Internet Bug Bounty: CVE-2016-3182 OpenJPEG color_esycc_to_rgb Out-of-Bounds Read Vulnerability
2016-09-13 08:24:48
Internet Bug Bounty: CVE-2016-3183 OpenJPEG sycc422_to_rgb Out-of-Bounds Read Vulnerability
2016-09-13 08:07:54
osv
osv
CVE-2016-3182
2020-02-20 01:15:10
CVE-2016-3183
2017-02-03 16:59:00
openjpeg vulnerabilities
2022-10-07 21:44:33
rosalinux
rosalinux
Advisory ROSA-SA-2023-2265
2023-10-22 05:44:11
suse
suse
Security update for openjpeg2 (important)
2017-08-17 00:10:07
Security update for openjpeg2 (important)
2017-09-26 03:07:23
Security update for openjpeg2 (important)
2017-01-19 15:08:59
ubuntu
ubuntu
OpenJPEG vulnerabilities
2022-10-07 00:00:00
androidsecurity
androidsecurity
Android Security Bulletin—June 2017
2017-06-05 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2020
2020-07-14 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.011 Low

EPSS

Percentile

84.7%

JSON
Related for GLSA-201612-26
nessus28fedora10openvas29ubuntucve6cve7nvd7prion7mageia2debian1cvelist7debiancve6hackerone3osv3rosalinux1suse6ubuntu1androidsecurity1oracle1