CVE-2016-9675
Fixed in a distro release EPSS 2%
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.
Products: uclouvain openjpeg, redhat enterprise_linux, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_power_big_endian, redhat enterprise_linux_for_scientific_computing
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | openjpeg | 0:1.3-16.el6_8 |
| Red Hat Enterprise Linux 6 | openjpeg-debuginfo | 0:1.3-16.el6_8 |
| Red Hat Enterprise Linux 6 | openjpeg-devel | 0:1.3-16.el6_8 |
| Red Hat Enterprise Linux 6 | openjpeg-libs | 0:1.3-16.el6_8 |
| Red Hat Enterprise Linux 7 | openjpeg | 0:1.5.1-16.el7_3 |
| Red Hat Enterprise Linux 7 | openjpeg-debuginfo | 0:1.5.1-16.el7_3 |
| Red Hat Enterprise Linux 7 | openjpeg-devel | 0:1.5.1-16.el7_3 |
| Red Hat Enterprise Linux 7 | openjpeg-libs | 0:1.5.1-16.el7_3 |
| Ubuntu 14.04 LTS | openjpeg | no fix |