Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-14040

Fixed in a distro release EPSS 5%

An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.

Published 2017-08-30 · CVE record · OSV

Products: uclouvain openjpeg, debian_linux

Distro releases

ReleasePackageFixed in
Alpine 3.10openjpeg2.2.0-r2
Alpine 3.11openjpeg2.2.0-r2
Alpine 3.12openjpeg2.2.0-r2
Alpine 3.13openjpeg2.2.0-r2
Alpine 3.14openjpeg2.2.0-r2
Alpine 3.15openjpeg2.2.0-r2
Alpine 3.16openjpeg2.2.0-r2
Alpine 3.17openjpeg2.2.0-r2
Alpine 3.18openjpeg2.2.0-r2
Alpine 3.19openjpeg2.2.0-r2
Alpine 3.20openjpeg2.2.0-r2
Alpine 3.21openjpeg2.2.0-r2
Alpine 3.22openjpeg2.2.0-r2
Alpine 3.23openjpeg2.2.0-r2
Alpine 3.24openjpeg2.2.0-r2
Alpine 3.3openjpeg2.2.0-r0
Alpine 3.4openjpeg2.2.0-r0
Alpine 3.5openjpeg2.2.0-r0
Alpine 3.6openjpeg2.2.0-r0
Alpine 3.7openjpeg2.2.0-r2
Alpine 3.8openjpeg2.2.0-r2
Alpine 3.9openjpeg2.2.0-r2
Debian 12openjpeg22.3.0-1
Debian 13openjpeg22.3.0-1
Debian 14openjpeg22.3.0-1
Debian 8openjpeg22.1.0-2+deb8u3
Debian 9openjpeg22.1.2-1.1+deb9u2
SUSE Linux Enterprise Desktop 12 SP2openjpeg22.1.0-4.6.1
SUSE Linux Enterprise Desktop 12 SP3openjpeg22.1.0-4.6.1
SUSE Linux Enterprise Server 12 SP2openjpeg22.1.0-4.6.1
SUSE Linux Enterprise Server 12 SP3openjpeg22.1.0-4.6.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2openjpeg22.1.0-4.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2openjpeg22.1.0-4.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3openjpeg22.1.0-4.6.1
SUSE Package Hub 12openjpeg22.1.0-9.1
SUSE Package Hub 12 SP1openjpeg22.1.0-9.1
Ubuntu 16.04 LTSopenjpeg22.1.2-1.1+deb9u2build0.1
Ubuntu 18.04 LTSopenjpeg22.3.0-1