Bug 1525088 (CVE-2017-17480) - CVE-2017-17480 openjpeg: Stack-buffer overflow in the pgxtovolume function
Summary: CVE-2017-17480 openjpeg: Stack-buffer overflow in the pgxtovolume function
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2017-17480
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1487769 1487770 1487771 1487772 1487773
Blocks: 1525090
TreeView+ depends on / blocked
 
Reported: 2017-12-12 15:17 UTC by Andrej Nemec
Modified: 2021-02-17 01:06 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2017-12-13 12:32:14 UTC
Embargoed:

Attachments (Terms of Use)

Description Andrej Nemec 2017-12-12 15:17:15 UTC 
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to a denial of service or possibly code execution.

Upstream issue:

https://github.com/uclouvain/openjpeg/issues/1044
Comment 1 Andrej Nemec 2017-12-12 15:20:31 UTC 
Created mingw-openjpeg tracking bugs for this issue:

Affects: fedora-all [bug 1487773]


Created mingw-openjpeg2 tracking bugs for this issue:

Affects: fedora-all [bug 1487772]


Created openjpeg tracking bugs for this issue:

Affects: fedora-all [bug 1487770]


Created openjpeg2 tracking bugs for this issue:

Affects: epel-all [bug 1487769]
Affects: fedora-all [bug 1487771]
Comment 2 Stefan Cornelius 2017-12-13 12:32:26 UTC 
Statement:

This issue did not affect the versions of openjpeg as shipped with Red Hat Enterprise Linux 6 and 7, as they did not include support for jp3d.
Note You need to log in before you can comment on or make changes to this bug.