CVE-2017-14039: Buffer Overflow
Published Aug 30, 2017
·Updated
A heap-based buffer overflow was discovered in the opjt2encodepacket function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
Affected Software
3 affected components
uclouvain openjpeg<2.3.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Aug 30, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14039?
CVE-2017-14039 has been classified as a critical vulnerability due to its potential to cause denial of service and other unspecified impacts.
2
How do I fix CVE-2017-14039?
To fix CVE-2017-14039, update OpenJPEG to version 2.3.0 or later.
3
What are the affected software versions for CVE-2017-14039?
CVE-2017-14039 affects OpenJPEG versions prior to 2.3.0 and Debian Linux versions 8.0 and 9.0.
4
Can CVE-2017-14039 be exploited remotely?
Yes, CVE-2017-14039 can be exploited remotely, potentially leading to a denial of service.
5
What type of vulnerability is CVE-2017-14039?
CVE-2017-14039 is a heap-based buffer overflow vulnerability.