Lucene search
PRIOn knowledge basePRION:CVE-2017-14164HistorySep 06, 2017 - 6:29 p.m.
Heap overflow
2017-09-0618:29:00
PRIOn knowledge base
www.prio-n.com
10
A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.
References
www.securityfocus.com/bid/100677
blogs.gentoo.org/ago/2017/09/06/heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c-incomplete-fix-for-cve-2017-14152/
github.com/uclouvain/openjpeg/commit/dcac91b8c72f743bda7dbfa9032356bc8110098a
github.com/uclouvain/openjpeg/issues/991
security.gentoo.org/glsa/201710-26
Related
nvd
nvd
CVE-2017-14164
2017-09-06 18:29:00
CVE-2017-14152
2017-09-05 16:29:00
cve
cve
CVE-2017-14164
2017-09-06 18:29:00
CVE-2017-14152
2017-09-05 16:29:00
ubuntucve
ubuntucve
CVE-2017-14164
2017-09-06 00:00:00
CVE-2017-14152
2017-09-05 00:00:00
alpinelinux
alpinelinux
CVE-2017-14164
2017-09-06 18:29:00
CVE-2017-14152
2017-09-05 16:29:00
debiancve
debiancve
CVE-2017-14164
2017-09-06 18:29:00
CVE-2017-14152
2017-09-05 16:29:00
redhatcve
redhatcve
CVE-2017-14164
2017-09-08 13:30:30
CVE-2017-14152
2017-09-06 08:20:50
veracode
veracode
Remote Code Execution
2020-05-10 23:28:20
Remote Code Execution
2020-05-10 23:28:23
osv
osv
CVE-2017-14164
2017-09-06 18:29:00
CVE-2017-14152
2017-09-05 16:29:00
openjpeg2 - security update
2017-10-31 00:00:00
cvelist
cvelist
CVE-2017-14164
2017-09-06 18:00:00
CVE-2017-14152
2017-09-05 16:00:00
prion
prion
Heap overflow
2017-09-05 16:29:00
nessus
nessus
RHEL 7 : openjpeg2 (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : openjpeg2 (Unpatched Vulnerability)
2024-05-11 00:00:00
Slackware 14.2 / current : openjpeg (SSA:2017-279-02)
2017-10-09 00:00:00
mageia
mageia
Updated openjpeg2 packages fix security vulnerability
2017-12-31 18:14:43
openvas
openvas
Fedora Update for openjpeg2 FEDORA-2017-f285db3668
2017-09-12 00:00:00
Fedora Update for mingw-openjpeg2 FEDORA-2017-f7a73de98d
2017-09-12 00:00:00
Mageia: Security Advisory (MGASA-2017-0481)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: mingw-openjpeg2-2.2.0-3.fc26
2017-09-11 04:21:37
[SECURITY] Fedora 25 Update: mingw-openjpeg2-2.2.0-3.fc25
2017-09-11 02:26:15
[SECURITY] Fedora 26 Update: openjpeg2-2.2.0-3.fc26
2017-09-06 14:53:48
slackware
slackware
[slackware-security] openjpeg
2017-10-06 06:34:10
debian
debian
[SECURITY] [DSA 4013-1] openjpeg2 security update
2017-10-31 22:01:32
gentoo
gentoo
OpenJPEG: Multiple vulnerabilities
2017-10-23 00:00:00