CVE-2016-1924
Fixed in a distro release EPSS 3%
The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
Products: uclouvain openjpeg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openjpeg2 | 2.1.1-1 |
| Debian 13 | openjpeg2 | 2.1.1-1 |
| Debian 14 | openjpeg2 | 2.1.1-1 |
| Debian 8 | openjpeg2 | 2.1.0-2+deb8u1 |
| SUSE HPE Helion OpenStack 8 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP5 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud 8 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud 9 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud Crowbar 9 | openjpeg2 | 2.1.0-4.15.1 |
| Ubuntu 16.04 LTS | openjpeg2 | 2.1.2-1.1+deb9u2build0.1 |