CVE-2016-10506 — Divide By Zero in Openjpeg

CWE-369 — Divide By Zero16 documents8 sources
Severity
6.5MEDIUMNVD
EPSS
4.3%
top 11.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
THE Openjpeg Project Openjpeg2Uclouvain Openjpeg
Timeline
PublishedAug 30
Latest updateOct 7

Description

Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶Ubuntuuclouvain/openjpeg< 1:1.5.2-3.1ubuntu0.1~esm2
▶Debianthe_openjpeg_project/openjpeg2< 2.2.0-1+3
▶Ubuntuthe_openjpeg_project/openjpeg2< 2.1.2-1.1+deb9u6ubuntu0.1~esm1+1

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

5
OSV
openjpeg vulnerabilities↗2022-10-07
▶
GHSA
GHSA-7pwx-r922-2j5r: Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi↗2022-05-13
▶
OSV
openjpeg2 vulnerabilities↗2021-03-17
▶
OSV
CVE-2016-10506: Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi↗2017-08-30
▶
CVEList
CVE-2016-10506: Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi↗2017-08-30
▶

📋Vendor Advisories

4
Ubuntu
OpenJPEG vulnerabilities↗2022-10-07
▶
Ubuntu
OpenJPEG vulnerabilities↗2021-03-17
▶
Red Hat
openjpeg: Division by zero in functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c↗2017-08-30
▶
Debian
CVE-2016-10506: openjpeg2 - Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_...↗2016
▶

💬Community

6
Bugzilla
CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-10507 mingw-openjpeg: various flaws [fedora-all]↗2017-08-31
▶
Bugzilla
CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-10507 openjpeg2: various flaws [epel-all]↗2017-08-31
▶
Bugzilla
CVE-2016-10506 openjpeg: Division by zero in functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c↗2017-08-31
▶
Bugzilla
CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-10507 openjpeg: various flaws [fedora-all]↗2017-08-31
▶
Bugzilla
CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-10507 openjpeg2: various flaws [fedora-all]↗2017-08-31
▶
CVE-2016-10506 — Divide By Zero in Uclouvain Openjpeg | cvebase