Red Hat Security AdvisoryRHSA-2017:0559
openjpeg security update
Released 2017-03-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openjpeg-1.3-16.el6_8, openjpeg-libs-1.3-16.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) openjpeg-1.3-16.el6_8, openjpeg-devel-1.3-16.el6_8
- Red Hat Enterprise Linux HPC Node (v. 6) openjpeg-1.3-16.el6_8, openjpeg-libs-1.3-16.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openjpeg-1.3-16.el6_8, openjpeg-devel-1.3-16.el6_8
- Red Hat Enterprise Linux Server (v. 6) openjpeg-1.3-16.el6_8, openjpeg-libs-1.3-16.el6_8, openjpeg-libs-1.3-16.el6_8.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) openjpeg-1.3-16.el6_8, openjpeg-devel-1.3-16.el6_8, openjpeg-devel-1.3-16.el6_8.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openjpeg-1.3-16.el6_8, openjpeg-libs-1.3-16.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 6) openjpeg-1.3-16.el6_8, openjpeg-devel-1.3-16.el6_8
Fixes 5 records
Priority MEDIUM 44
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07114 · Published 2016-09-21 · Fixed CWE-190
Priority MEDIUM 42
Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01963 · Published 2016-09-11 · Fixed CWE-190
Priority MEDIUM 41
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to ca…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01536 · Published 2016-09-11 · Fixed CWE-190
Priority LOW 38
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01896 · Published 2016-12-22 · Fixed CWE-787
Priority LOW 36
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow)…
CVSS 3.0HIGH 7.6· Network · No auth · User interaction · EPSS 0.01284 · Published 2016-08-07 · Fixed CWE-119
THREATIST.IORead the docs