CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
uclouvainopenjpeg
2.3.1
opensuseleap
15.0
opensuseleap
15.1
debiandebian_linux
9.0
oracleoutside_in_technology
8.5.4
oracleoutside_in_technology
8.5.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openjpeg2
bullseye
2.4.0-3
fixed
buster
ignored
jessie
not-affected
sid
2.5.0-2
fixed
trixie
2.5.0-2
fixed
bookworm
2.5.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
blender
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
needs-triage
impish
ignored
hirsute
ignored
groovy
ignored
focal
needs-triage
eoan
ignored
disco
ignored
cosmic
ignored
bionic
needs-triage
xenial
needs-triage
trusty
dne
emscripten
noble
ignored
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
ignored
impish
ignored
hirsute
ignored
groovy
dne
focal
dne
eoan
ignored
disco
ignored
cosmic
ignored
bionic
ignored
xenial
ignored
trusty
dne
gdcm
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
not-affected
disco
not-affected
cosmic
ignored
bionic
not-affected
xenial
not-affected
trusty
not-affected
ghostscript
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
insighttoolkit4
noble
dne
mantic
dne
lunar
ignored
kinetic
ignored
jammy
needs-triage
impish
ignored
hirsute
ignored
groovy
ignored
focal
needs-triage
eoan
ignored
disco
ignored
cosmic
ignored
bionic
needs-triage
xenial
needs-triage
trusty
dne
openjpeg
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
dne
impish
dne
hirsute
dne
groovy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
not-affected
openjpeg2
noble
Fixed 2.3.1-1ubuntu4
released
mantic
Fixed 2.3.1-1ubuntu4
released
lunar
Fixed 2.3.1-1ubuntu4
released
kinetic
Fixed 2.3.1-1ubuntu4
released
jammy
Fixed 2.3.1-1ubuntu4
released
impish
Fixed 2.3.1-1ubuntu4
released
hirsute
Fixed 2.3.1-1ubuntu4
released
groovy
Fixed 2.3.1-1ubuntu4
released
focal
Fixed 2.3.1-1ubuntu4
released
eoan
ignored
disco
ignored
cosmic
ignored
bionic
Fixed 2.3.0-2+deb10u2ubuntu0.1~esm1
released
xenial
Fixed 2.1.2-1.1+deb9u5build0.16.04.1
released
trusty
dne
qtwebengine-opensource-src
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
needs-triage
impish
ignored
hirsute
ignored
groovy
ignored
focal
needs-triage
eoan
ignored
disco
ignored
cosmic
ignored
bionic
needs-triage
xenial
dne
trusty
dne
texmaker
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
needs-triage
impish
ignored
hirsute
ignored
groovy
ignored
focal
needs-triage
eoan
ignored
disco
ignored
cosmic
ignored
bionic
needs-triage
xenial
needs-triage
trusty
dne