CVE-2013-1447
published 2013-12-12CVE-2013-1447: OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer…
PriorityP421medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.50%
82.9th percentile
OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| uclouvain | openjpeg | < 1.5.2 | 1.5.2 |
| uclouvain | openjpeg | <= 1.3 | — |
| uclouvain | openjpeg | >= 0 < 1.3+dfsg-4.7ubuntu1 | 1.3+dfsg-4.7ubuntu1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-ccpm-4wxg-wxgf: OpenJPEG 1
ghsa_unreviewed·2022-05-13
CVE-2013-1447 [MEDIUM] GHSA-ccpm-4wxg-wxgf: OpenJPEG 1
OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
GHSA
GHSA-8w7m-78c5-5pmm: Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1
ghsa_unreviewed·2022-05-13·CVSS 5.0
CVE-2014-0158 [MEDIUM] CWE-119 GHSA-8w7m-78c5-5pmm: Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1
Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file because of incorrect j2k_decode, j2k_read_eoc, and tcd_decode_tile interaction, a related issue to CVE-2013-6045. NOTE: this is not a duplicate of CVE-2013-1447, because the scope of CVE-2013-1447 was specifically defined in http://openwall.com/lists/oss-security/2013/12/04/6 as only "null pointer dereferences, division by zero, and anything that would just fit as DoS."
OSV
CVE-2013-1447: OpenJPEG 1
osv·2013-12-12·CVSS 5.0
CVE-2013-1447 [MEDIUM] CVE-2013-1447: OpenJPEG 1
OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
Red Hat
openjpeg: multiple denial of service flaws
vendor_redhat·2013-12-04·CVSS 5.0
CVE-2013-1447 [MEDIUM] openjpeg: multiple denial of service flaws
openjpeg: multiple denial of service flaws
OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
Package: openjpeg (Red Hat Enterprise Linux 7) - Not affected
No detection rules found.
No public exploits indexed.
Bugzilla
openjpeg: Heap-based buffer overflow in JPEG2000 image tile decoder
bugzilla·2014-04-01
[MEDIUM] openjpeg: Heap-based buffer overflow in JPEG2000 image tile decoder
openjpeg: Heap-based buffer overflow in JPEG2000 image tile decoder
A heap-based buffer overflow was found in the way openjpeg parsed certain image files from a JPEG2000 image. If a specially-crafted image were opened by an application linked against OpenJPEG, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.
Discussion:
When decoding the specially-crafted image, tcd_decode_tile() fails at:
1400 if (tilec->data == NULL)
1401 {
1402 opj_event_msg(tcd->cinfo, EVT_ERROR, "Out of memory\n");
1403 return OPJ_FALSE;
1404 }
It returns OPJ_FALSE, which is recorded into j2k->state in j2k_read_eoc() at:
1670 success = tcd_decode_tile(tcd, j2k->tile_data[tileno], j2k->tile_len[tileno], tileno, j2k->cstr_info)
Bugzilla
CVE-2014-0158 openjpeg: Heap-based buffer overflow in JPEG2000 image tile decoder [fedora-all]
bugzilla·2014-04-01·CVSS 5.0
CVE-2014-0158 [MEDIUM] CVE-2014-0158 openjpeg: Heap-based buffer overflow in JPEG2000 image tile decoder [fedora-all]
CVE-2014-0158 openjpeg: Heap-based buffer overflow in JPEG2000 image tile decoder [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please not
Bugzilla
CVE-2013-6887 CVE-2013-1447 mingw-openjpeg: various flaws [fedora-all]
bugzilla·2013-12-06·CVSS 5.0
CVE-2013-6887 [MEDIUM] CVE-2013-6887 CVE-2013-1447 mingw-openjpeg: various flaws [fedora-all]
CVE-2013-6887 CVE-2013-1447 mingw-openjpeg: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects mu
Bugzilla
CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 openjpeg: various flaws [epel-5]
bugzilla·2013-12-05·CVSS 5.0
CVE-2013-6054 [MEDIUM] CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 openjpeg: various flaws [epel-5]
CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 openjpeg: various flaws [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
epel-5 trac
Bugzilla
CVE-2013-6887 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6053 openjpeg: various flaws [fedora-all]
bugzilla·2013-12-05·CVSS 5.0
CVE-2013-6887 [MEDIUM] CVE-2013-6887 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6053 openjpeg: various flaws [fedora-all]
CVE-2013-6887 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6053 openjpeg: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Bugzilla
CVE-2013-1447 openjpeg: multiple denial of service flaws
bugzilla·2013-12-04·CVSS 5.0
CVE-2013-1447 [MEDIUM] CVE-2013-1447 openjpeg: multiple denial of service flaws
CVE-2013-1447 openjpeg: multiple denial of service flaws
Raphael Geissert discovered multiple denial of service flaws in OpenJPEG. If a specially-crafted image were opened by an application linked against OpenJPEG, it could cause the application to crash.
Acknowledgements:
Red Hat would like to thank Raphael Geissert for reporting these issues during a review for EDF.
Discussion:
Created openjpeg tracking bugs for this issue:
Affects: fedora-all [bug 1038409]
Affects: epel-5 [bug 1038411]
---
Created mingw-openjpeg tracking bugs for this issue:
Affects: fedora-all [bug 1038981]
---
Created attachment 835142
patch 1
---
Created attachment 835143
patch 2
---
Created attachment 835144
patch 3
---
Created attachment 835145
patch 4
---
Created attachment 835146
patch 5
---
http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWShttp://rhn.redhat.com/errata/RHSA-2013-1850.htmlhttp://seclists.org/oss-sec/2013/q4/412http://www.debian.org/security/2013/dsa-2808http://www.securityfocus.com/bid/64142http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWShttp://rhn.redhat.com/errata/RHSA-2013-1850.htmlhttp://seclists.org/oss-sec/2013/q4/412http://www.debian.org/security/2013/dsa-2808http://www.securityfocus.com/bid/64142
2013-12-12
Published