Out-of-bounds write in OpenJPEG - CVE-2017-14039
Published: August 31, 2017 / Updated: August 3, 2020
Vulnerability identifier: #VU33224
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-14039
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
Affected software
OpenJPEG
openjpeg (Alpine package)
Slackware Linux
openjpeg (Alpine package)
Slackware Linux
How to mitigate CVE-2017-14039
Install update from vendor's website.
OpenJPEG - update to 2.3.0
openjpeg (Alpine package) - update to 2.2.0-r1
openjpeg (Alpine package) - update to 2.2.0-r1
External References
- http://www.debian.org/security/2017/dsa-4013
- http://www.securityfocus.com/bid/100550
- https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/
- https://github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e
- https://github.com/uclouvain/openjpeg/issues/992
- https://security.gentoo.org/glsa/201710-26