REDHAT-BUG-1536552: Integer Overflow

Published Jan 19, 2018

Updated

A flaw was found in OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function in openjp2/t1.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

References: https://github.com/uclouvain/openjpeg/issues/1053

Affected Software

1 affected component

uclouvain openjpeg

Event History

Jan 19, 2018

Data Sourced

via Red Hat·04:05 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1536552?

The severity of REDHAT-BUG-1536552 is classified as a denial of service vulnerability.

How do I fix REDHAT-BUG-1536552?

To fix REDHAT-BUG-1536552, you should update OpenJPEG to the latest version that addresses the integer overflow issue.

What is the impact of REDHAT-BUG-1536552?

The impact of REDHAT-BUG-1536552 allows remote attackers to exploit crafted bmp files to cause a denial of service.

Is REDHAT-BUG-1536552 exploitable remotely?

Yes, REDHAT-BUG-1536552 is exploitable remotely by attackers using specially crafted bmp files.

Are there any affected versions for REDHAT-BUG-1536552?

The vulnerability REDHAT-BUG-1536552 affects OpenJPEG version 2.3.0.