CVE-2016-3183: Medium severity uclouvain openjpeg vulnerability
Published Mar 15, 2016
·Updated
n our-of-bounds read vulnerability in sycc422torgb function triggered by specially crafted JPEG2000 image file was found in openjpeg version 2016.03.14.
CVE request (contains reproducer):
http://seclists.org/oss-sec/2016/q1/632
Other sources
The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.
— MITRE
Affected Software
1 affected component
uclouvain openjpeg<=2.1.0
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Mar 15, 2016
Data Sourced
via Red Hat·10:08 AM
DescriptionSeverityAffected Software
Feb 3, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-3183?
CVE-2016-3183 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2016-3183?
To fix CVE-2016-3183, upgrade to a version of OpenJPEG later than 2.1.0.
3
What software is affected by CVE-2016-3183?
CVE-2016-3183 affects versions of OpenJPEG up to and including 2.1.0.
4
What type of vulnerability is CVE-2016-3183?
CVE-2016-3183 is an out-of-bounds read vulnerability.
5
How can CVE-2016-3183 be exploited?
CVE-2016-3183 can be exploited by specially crafting a JPEG2000 image file.