CVE-2017-14152: Buffer Overflow
A mishandled zero case was discovered in opjj2ksetcinemaparameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c and opjj2kwritesot in lib/openjp2/j2k.c) or possibly remote code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14152?
CVE-2017-14152 is rated as a high severity vulnerability due to the potential for a remote denial of service caused by heap-based buffer overflow.
How do I fix CVE-2017-14152?
To fix CVE-2017-14152, update OpenJPEG to version 2.3.0 or later.
What software is affected by CVE-2017-14152?
CVE-2017-14152 affects OpenJPEG version 2.2.0 and specifically impacts Debian Linux versions 8.0 and 9.0.
How does CVE-2017-14152 exploit a vulnerability?
CVE-2017-14152 exploits a mishandled zero case that leads to an out-of-bounds write in the OpenJPEG library.
What symptoms indicate an issue with CVE-2017-14152?
The primary symptom of CVE-2017-14152 is unexpected application crashes or remote denial of service when processing certain JPEG 2000 files.