Published: 30/08/2017 Updated: 02/02/2021

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

A stack-based buffer overflow exists in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
uclouvain openjpeg 2.2.0
debian debian linux 8.0
debian debian linux 9.0

Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed For the oldstable distribution (jessie), these problems have been fixed in version 210-2+deb8u3 For the stable distribution (stretch), these pr ...

Debian Bug report logs - #874115 openjpeg2: CVE-2017-14041: Stack-based buffer over-write in pgxtoimage function in bin/jp2/convertc Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> ...

Debian Bug report logs - #874431 openjpeg2: CVE-2017-14152: heap-based buffer overflow in opj_write_bytes_LE Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 6 Sep 2017 ...

Debian Bug report logs - #874430 openjpeg2: CVE-2017-14151: heap-based buffer overflow in opj_mqc_flush Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 6 Sep 2017 04:5 ...

A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convertc in OpenJPEG 220 The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution ...

CWE-787 https://github.com/uclouvain/openjpeg/issues/997 https://github.com/uclouvain/openjpeg/commit/e5285319229a5d77bf316bb0d3a6cbd3cb8666d9 https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/http://www.securityfocus.com/bid/100555 http://www.debian.org/security/2017/dsa-4013 https://nvd.nist.gov https://www.debian.org/security/./dsa-4013

CVE-2017-14041

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect