CVE-2019-12973
EUVD-2019-454826.06.2019, 18:15
In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| uclouvain | openjpeg | 2.3.1 |
| opensuse | leap | 15.0 |
| opensuse | leap | 15.1 |
| debian | debian_linux | 9.0 |
| oracle | outside_in_technology | 8.5.4 |
| oracle | outside_in_technology | 8.5.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| blender |
| ||||||||||||||||||||||||||||||
| emscripten |
| ||||||||||||||||||||||||||||||
| gdcm |
| ||||||||||||||||||||||||||||||
| ghostscript |
| ||||||||||||||||||||||||||||||
| insighttoolkit4 |
| ||||||||||||||||||||||||||||||
| openjpeg |
| ||||||||||||||||||||||||||||||
| openjpeg2 |
| ||||||||||||||||||||||||||||||
| qtwebengine-opensource-src |
| ||||||||||||||||||||||||||||||
| texmaker |
|
Common Weakness Enumeration
References