Published: 09/10/2018 Updated: 21/08/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

It exists that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. (CVE-2017-17480)

Vulnerable Product	Search on Vulmon	Subscribe to Product
uclouvain openjpeg 2.3.0
debian debian linux 9.0
debian debian linux 8.0

Several security issues were fixed in OpenJPEG ...

Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, that could be leveraged to cause a denial of service or possibly remote code execution CVE-2017-17480 Write stack buffer overflow in the jp3d and jpwl codecs can result in a denial of service or remote code execution via a crafted jp3d or jpwl ...

Debian Bug report logs - #888533 openjpeg2: CVE-2018-5785: integer overflow in opj_j2k_setup_encoder function in openjp2/j2kc Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date ...

Debian Bug report logs - #910763 openjpeg2: CVE-2018-18088 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 10 Oct 2018 20:24:01 UTC Severity: serious Tags: fixed-upstr ...

Debian Bug report logs - #904873 openjpeg2: CVE-2018-14423 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 29 Jul 2018 04:03:12 UTC Severity: important Tags: fixed-ups ...

Debian Bug report logs - #889683 openjpeg2: CVE-2018-6616: Excessive Iteration in opj_t1_encode_cblks Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 5 Feb 2018 20:06: ...

Debian Bug report logs - #884738 openjpeg2: CVE-2017-17480: stack-based buffer overflow in pgxtovolume function in jp3d/convertc Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> D ...

CWE-476 https://github.com/uclouvain/openjpeg/issues/1152 https://lists.debian.org/debian-lts-announce/2018/11/msg00018.html https://www.debian.org/security/2019/dsa-4405 https://usn.ubuntu.com/4109-1/https://usn.ubuntu.com/4109-1/https://nvd.nist.gov

CVE-2018-18088

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect