CVE-2017-12982Improper Restriction of Operations within the Bounds of a Memory Buffer in Openjpeg

Severity
5.5MEDIUMNVD
OSV6.5
EPSS
0.4%
top 37.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 21
Latest updateMay 13

Description

The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

NVDuclouvain/openjpeg< 2.3.0
Debianthe_openjpeg_project/openjpeg2< 2.3.0-1+3
Ubuntuthe_openjpeg_project/openjpeg2< 2.1.2-1.1+deb9u6ubuntu0.1~esm1+1

Patches

🔴Vulnerability Details

4
GHSA
GHSA-4v94-xg8j-pp22: The bmp_read_info_header function in bin/jp2/convertbmp2022-05-13
OSV
openjpeg2 vulnerabilities2021-03-17
CVEList
CVE-2017-12982: The bmp_read_info_header function in bin/jp2/convertbmp2017-08-21
OSV
CVE-2017-12982: The bmp_read_info_header function in bin/jp2/convertbmp2017-08-21

📋Vendor Advisories

3
Ubuntu
OpenJPEG vulnerabilities2021-03-17
Red Hat
openjpeg: Memory allocation failure in the opj_image_create function2017-08-14
Debian
CVE-2017-12982: openjpeg2 - The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does...2017

💬Community

1
Bugzilla
CVE-2017-12982 openjpeg: Memory allocation failure in the opj_image_create function2017-08-31
CVE-2017-12982 — Uclouvain Openjpeg vulnerability | cvebase