PT-2016-4050 · Openjpeg+2 · Openjpeg+2

Feist Josselin + 1 · Publicado 2016-07-09 · Atualizado 2020-09-09 · CVE-2015-8871

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 2.1.1

Description The issue is related to a use-after-free vulnerability in the opj j2k write mco function, located in the j2k.c file. This vulnerability allows remote attackers to have an unspecified impact via unknown vectors.

Recommendations For versions prior to 2.1.1, update to version 2.1.1 or later to resolve the issue.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2016-1743

CVE-2015-8871

DSA-3665-1

OPENSUSE-SU-2017:2567-1

OPENSUSE-SU-2017_2186-1

SUSE-SU-2017:2144-1

SUSE-SU-2017_2144-1

Produtos afetados

Alt Linux

Openjpeg

Suse

Referências · 70

• https://github.com/uclouvain/openjpeg/issues/826 · Nota
• https://github.com/uclouvain/openjpeg/blob/master/CHANGELOG.md · Nota
• https://github.com/uclouvain/openjpeg/issues/563 · Correção
• https://github.com/uclouvain/openjpeg/commit/940100c28ae28931722290794889cf84a92c5f6f · Correção
• https://bugzilla.suse.com/997857 · Nota
• https://suse.com/security/cve/CVE-2016-9581 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8871 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7163 · Nota de Segurança
• https://bugzilla.suse.com/1007747 · Nota
• https://bugzilla.suse.com/1007741 · Nota
• https://suse.com/security/cve/CVE-2016-9115 · Nota
• https://suse.com/security/cve/CVE-2016-9580 · Nota
• https://bdu.fstec.ru/vul/2015-11331 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-8871 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2015-8871 · Aviso do Fabricante