The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.
References
Link | Resource |
---|---|
https://blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c/ | Patch Third Party Advisory VDB Entry |
https://github.com/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7 | Issue Tracking Patch Third Party Advisory |
https://github.com/uclouvain/openjpeg/issues/983 | Issue Tracking Patch Third Party Advisory |
https://security.gentoo.org/glsa/201710-26 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2017-08-21T07:00:00
Updated: 2017-10-23T09:57:01
Reserved: 2017-08-21T00:00:00
Link: CVE-2017-12982
JSON object: View
NVD Information
Status : Analyzed
Published: 2017-08-21T07:29:00.373
Modified: 2021-02-02T19:56:30.907
Link: CVE-2017-12982
JSON object: View
Redhat Information
No data.
CWE