CVE-2016-9675: Buffer Overflow
Published Dec 22, 2016
·Updated
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.
Affected Software
11 affected components
uclouvain openjpeg<1.5.2
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
redhat Enterprise Linux=7.3
redhat Enterprise Linux=7.4
redhat Enterprise Linux=7.5
redhat Enterprise Linux=7.6
redhat Enterprise Linux=7.7
redhat Enterprise Linux For Ibm Z Systems=6.0
redhat Enterprise Linux For Power Big Endian=6.0
redhat Enterprise Linux For Scientific Computing=6.0
Remediation
Patch Available
Patch Available
Event History
Dec 22, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-9675?
CVE-2016-9675 is categorized as a moderate severity vulnerability due to its potential to cause application crashes and arbitrary code execution.
2
How do I fix CVE-2016-9675?
To mitigate CVE-2016-9675, upgrade OpenJPEG to version 1.5.2 or later.
3
Which software versions are affected by CVE-2016-9675?
CVE-2016-9675 affects OpenJPEG versions prior to 1.5.2 and various versions of Red Hat Enterprise Linux including 6.0 and 7.0 to 7.7.
4
What type of vulnerability is CVE-2016-9675?
CVE-2016-9675 is a heap-based buffer overflow vulnerability.
5
Can CVE-2016-9675 lead to remote code execution?
Yes, CVE-2016-9675 can allow an attacker to execute arbitrary code on the affected system.