Buffer overflow in OpenJPEG - CVE-2016-1924

Vulnerability identifier: #VU63444

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-1924

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial-of-service attack.

The vulnerability exists due to a boundary error in the opj_tgt_reset function. A remote attacker can create a specially crafted JPEG 2000 image, trick the victim into opening it, trigger memory corruption and perform a denial-of-service attack.

OpenJPEG
Gentoo Linux
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
media-libs/openjpeg
libopenjp2-7
libopenjp2-7-debuginfo
openjpeg2-debuginfo
openjpeg2-debugsource

Install update from vendor's website.

OpenJPEG - update to 2.1.0
media-libs/openjpeg - update to 1.5.2
libopenjp2-7 - update to 2.1.0-4.15.1
libopenjp2-7-debuginfo - update to 2.1.0-4.15.1
openjpeg2-debuginfo - update to 2.1.0-4.15.1
openjpeg2-debugsource - update to 2.1.0-4.15.1

• http://www.debian.org/security/2016/dsa-3665
• http://www.openwall.com/lists/oss-security/2016/01/18/4
• http://www.openwall.com/lists/oss-security/2016/01/18/7
• https://security.gentoo.org/glsa/201612-26
• https://www.oracle.com/security-alerts/cpujul2020.html

• SUSE update for openjpeg2
• Gentoo update for OpenJPEG