PT-2017-7960 · Intel+1 · Opencv+1

Rstevens70 · Publicado 2017-04-10 · Atualizado 2021-10-12 · CVE-2016-1517

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenCV versions 3.0.0 through 3.3.0

Description The issue allows remote attackers to cause a denial of service, resulting in a segfault, via vectors involving corrupt chunks. This issue was fixed in OpenCV version 3.3.1.

Recommendations For OpenCV versions 3.0.0 through 3.3.0, update to OpenCV version 3.3.1 or later to resolve the issue.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-1517

GHSA-FFFJ-9QWG-QMH5

OPENSUSE-SU-2018:1265-1

OPENSUSE-SU-2018:1271-1

OPENSUSE-SU-2018_1265-1

Produtos afetados

Opencv

Suse

Referências · 24

• 🔥 https://arxiv.org/pdf/1701.04739.pdf · Exploit
• https://github.com/opencv/opencv/issues/5956 · Correção
• https://github.com/opencv/opencv/pull/9376 · Nota
• https://github.com/opencv/opencv-python · Nota
• https://bugzilla.suse.com/1033150 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/YHQ7O5K6ZY3DSXG4XFVGLS3STRCLLFRB · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/V4TPAQTE3H3ONZFHSSFH4J6PADW56LC3/#V4TPAQTE3H3ONZFHSSFH4J6PADW56LC3 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2018:1265-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-07598 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-1517 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1517 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-1517 · Nota
• https://suse.com/security/cve/CVE-2016-1517.html · Nota
• https://bugzilla.suse.com/1033152 · Nota
• https://osv.dev/vulnerability/GHSA-fffj-9qwg-qmh5 · Aviso do Fabricante