CVE-2016-4797
Fixed in a distro release EPSS 2%
Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947.
Products: uclouvain openjpeg, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openjpeg2 | 2.1.1-1 |
| Debian 13 | openjpeg2 | 2.1.1-1 |
| Debian 14 | openjpeg2 | 2.1.1-1 |
| SUSE HPE Helion OpenStack 8 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server 12 SP5 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud 8 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud 9 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | openjpeg2 | 2.1.0-4.15.1 |
| SUSE OpenStack Cloud Crowbar 9 | openjpeg2 | 2.1.0-4.15.1 |
| Ubuntu 16.04 LTS | openjpeg2 | 2.1.2-1.1+deb9u2build0.1 |