Vulnerability Details : CVE-2017-12982
The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2017-12982
- cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-12982
0.35%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 55 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-12982
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2017-12982
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-12982
-
https://github.com/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7
bmp_read_info_header(): reject bmp files with biBitCount == 0 (#983) · uclouvain/openjpeg@baf0c1a · GitHubIssue Tracking;Patch;Third Party Advisory
-
https://security.gentoo.org/glsa/201710-26
OpenJPEG: Multiple vulnerabilities (GLSA 201710-26) — Gentoo securityThird Party Advisory
-
https://blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c/
openjpeg: memory allocation failure in opj_aligned_alloc_n (opj_malloc.c) | agostino's blogPatch;Third Party Advisory;VDB Entry
-
https://github.com/uclouvain/openjpeg/issues/983
memory allocation failure in opj_aligned_alloc_n (opj_malloc.c) · Issue #983 · uclouvain/openjpeg · GitHubIssue Tracking;Patch;Third Party Advisory
Jump to