Lucene search
Veracode Vulnerability DatabaseVERACODE:25366HistoryMay 10, 2020 - 11:28 p.m.
Remote Code Execution
2020-05-1023:28:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.007 Low
EPSS
Percentile
80.1%
openjpeg is vulnerable to remote code execution. The vulnerability exists as a mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openjpeg:3.3 | eq | 2.1.2-r1 |
Related
redhatcve
redhatcve
CVE-2017-14152
2017-09-06 08:20:50
CVE-2017-14164
2017-09-08 13:30:30
debiancve
debiancve
CVE-2017-14152
2017-09-05 16:29:00
CVE-2017-14164
2017-09-06 18:29:00
prion
prion
Heap overflow
2017-09-05 16:29:00
Heap overflow
2017-09-06 18:29:00
osv
osv
CVE-2017-14152
2017-09-05 16:29:00
CVE-2017-14164
2017-09-06 18:29:00
openjpeg2 - security update
2017-10-31 00:00:00
cve
cve
CVE-2017-14152
2017-09-05 16:29:00
CVE-2017-14164
2017-09-06 18:29:00
alpinelinux
alpinelinux
CVE-2017-14152
2017-09-05 16:29:00
CVE-2017-14164
2017-09-06 18:29:00
nvd
nvd
CVE-2017-14152
2017-09-05 16:29:00
CVE-2017-14164
2017-09-06 18:29:00
cvelist
cvelist
CVE-2017-14152
2017-09-05 16:00:00
CVE-2017-14164
2017-09-06 18:00:00
ubuntucve
ubuntucve
CVE-2017-14152
2017-09-05 00:00:00
CVE-2017-14164
2017-09-06 00:00:00
veracode
veracode
Remote Code Execution
2020-05-10 23:28:20
fedora
fedora
[SECURITY] Fedora 26 Update: openjpeg2-2.2.0-3.fc26
2017-09-06 14:53:48
[SECURITY] Fedora 25 Update: openjpeg2-2.2.0-3.fc25
2017-09-11 02:26:13
[SECURITY] Fedora 26 Update: mingw-openjpeg2-2.2.0-3.fc26
2017-09-11 04:21:37
openvas
openvas
Fedora Update for mingw-openjpeg2 FEDORA-2017-43390e73b1
2017-09-12 00:00:00
Fedora Update for openjpeg2 FEDORA-2017-f285db3668
2017-09-12 00:00:00
Fedora Update for mingw-openjpeg2 FEDORA-2017-f7a73de98d
2017-09-12 00:00:00
nessus
nessus
Fedora 25 : openjpeg2 (2017-f285db3668)
2017-09-11 00:00:00
Fedora 25 : mingw-openjpeg2 (2017-f7a73de98d)
2017-09-11 00:00:00
Fedora 26 : openjpeg2 (2017-5a3cd21cee)
2017-09-07 00:00:00
debian
debian
[SECURITY] [DSA 4013-1] openjpeg2 security update
2017-10-31 22:01:32
slackware
slackware
[slackware-security] openjpeg
2017-10-06 06:34:10