Vulnerability Details : CVE-2017-14151
An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution.
Vulnerability category: OverflowExecute codeDenial of service
Products affected by CVE-2017-14151
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:uclouvain:openjpeg:2.2.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-14151
0.70%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 70 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-14151
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2017-14151
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-14151
-
https://github.com/uclouvain/openjpeg/issues/982
heap-base buffer overflow in opj_mqc_flush (mqc.c) · Issue #982 · uclouvain/openjpeg · GitHubIssue Tracking;Patch;Third Party Advisory
-
https://github.com/uclouvain/openjpeg/commit/afb308b9ccbe129608c9205cf3bb39bbefad90b9
Encoder: grow buffer size in opj_tcd_code_block_enc_allocate_data() t… · uclouvain/openjpeg@afb308b · GitHubIssue Tracking;Patch;Third Party Advisory
-
http://www.debian.org/security/2017/dsa-4013
Debian -- Security Information -- DSA-4013-1 openjpeg2Third Party Advisory
-
http://www.securityfocus.com/bid/100633
OpenJPEG 'mqc.c' Remote Heap Based Buffer Overflow VulnerabilityThird Party Advisory;VDB Entry
-
https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c/
openjpeg: heap-based buffer overflow in opj_mqc_flush (mqc.c) | agostino's blogPatch;Third Party Advisory;VDB Entry
Jump to