openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.
References
Link | Resource |
---|---|
http://rhn.redhat.com/errata/RHSA-2017-0559.html | Patch Third Party Advisory |
http://rhn.redhat.com/errata/RHSA-2017-0838.html | Patch Third Party Advisory |
http://www.openwall.com/lists/oss-security/2016/11/29/7 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/94589 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
10 Feb 2023, 18:29
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-787 | |
First Time |
Redhat enterprise Linux
Redhat Redhat enterprise Linux For Scientific Computing Redhat enterprise Linux For Power Big Endian Redhat enterprise Linux For Ibm Z Systems |
|
References | (REDHAT) http://rhn.redhat.com/errata/RHSA-2017-0559.html - Patch, Third Party Advisory | |
References | (REDHAT) http://rhn.redhat.com/errata/RHSA-2017-0838.html - Patch, Third Party Advisory | |
CPE | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:* |
26 Jan 2021, 12:50
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:* |
Information
Published : 2016-12-22 21:59
Updated : 2023-12-10 12:01
NVD link : CVE-2016-9675
Mitre link : CVE-2016-9675
CVE.ORG link : CVE-2016-9675
JSON object : View
Products Affected
redhat
- enterprise_linux
- enterprise_linux_for_ibm_z_systems
- enterprise_linux_for_power_big_endian
- enterprise_linux_for_scientific_computing
uclouvain
- openjpeg
CWE
CWE-787
Out-of-bounds Write