Lucene search
Veracode Vulnerability DatabaseVERACODE:25260HistoryMay 10, 2020 - 11:22 p.m.
Arbitrary Code Execution
2020-05-1023:22:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.017 Low
EPSS
Percentile
87.8%
openjpeg is vulnerable to arbitrary code execution. A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c which may lead to remote denial of service or potentially allow an attacker to execute arbitrary code on the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openjpeg:3.4 | eq | 2.2.0-r0 | |
| openjpeg:3.3 | eq | 2.1.2-r1 |
References
www.debian.org/security/2017/dsa-4013
www.securityfocus.com/bid/100550
blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/
github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e
github.com/uclouvain/openjpeg/issues/992
security.gentoo.org/glsa/201710-26
Related
redhatcve
redhatcve
CVE-2017-14039
2017-09-01 21:49:11
nvd
nvd
CVE-2017-14039
2017-08-30 22:29:00
prion
prion
Heap overflow
2017-08-30 22:29:00
cve
cve
CVE-2017-14039
2017-08-30 22:29:00
ubuntucve
ubuntucve
CVE-2017-14039
2017-08-30 00:00:00
cvelist
cvelist
CVE-2017-14039
2017-08-30 22:00:00
alpinelinux
alpinelinux
CVE-2017-14039
2017-08-30 22:29:00
osv
osv
CVE-2017-14039
2017-08-30 22:29:00
openjpeg2 - security update
2017-10-31 00:00:00
debiancve
debiancve
CVE-2017-14039
2017-08-30 22:29:00
mageia
mageia
Updated openjpeg2 packages fix security vulnerability
2017-12-31 18:14:43
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0481)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2649-1)
2021-04-19 00:00:00
Debian: Security Advisory (DSA-4013-1)
2017-10-30 00:00:00
nessus
nessus
openSUSE Security Update : openjpeg2 (openSUSE-2017-1142)
2017-10-11 00:00:00
SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2017:2649-1)
2017-10-06 00:00:00
Debian DSA-4013-1 : openjpeg2 - security update
2017-11-02 00:00:00
debian
debian
[SECURITY] [DSA 4013-1] openjpeg2 security update
2017-10-31 22:01:32
slackware
slackware
[slackware-security] openjpeg
2017-10-06 06:34:10
gentoo
gentoo
OpenJPEG: Multiple vulnerabilities
2017-10-23 00:00:00