Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-6616

Fixed in a distro release EPSS 2%

In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

Published 2018-02-04 · CVE record · OSV

Products: uclouvain openjpeg, debian_linux, canonical ubuntu_linux, oracle georaster

Distro releases

ReleasePackageFixed in
Alpine 3.10openjpeg2.3.0-r2
Alpine 3.11openjpeg2.3.0-r2
Alpine 3.12openjpeg2.3.0-r2
Alpine 3.13openjpeg2.3.0-r2
Alpine 3.14openjpeg2.3.0-r2
Alpine 3.15openjpeg2.3.0-r2
Alpine 3.16openjpeg2.3.0-r2
Alpine 3.17openjpeg2.3.0-r2
Alpine 3.18openjpeg2.3.0-r2
Alpine 3.19openjpeg2.3.0-r2
Alpine 3.20openjpeg2.3.0-r2
Alpine 3.21openjpeg2.3.0-r2
Alpine 3.22openjpeg2.3.0-r2
Alpine 3.23openjpeg2.3.0-r2
Alpine 3.24openjpeg2.3.0-r2
Alpine 3.6openjpeg2.3.0-r1
Alpine 3.7openjpeg2.3.0-r1
Alpine 3.8openjpeg2.3.0-r1
Alpine 3.9openjpeg2.3.0-r2
Debian 12openjpeg22.3.0-2
Debian 13openjpeg22.3.0-2
Debian 14openjpeg22.3.0-2
Debian 8openjpeg22.1.0-2+deb8u6
Debian 9openjpeg22.1.2-1.1+deb9u3
Red Hat Enterprise Linux 7openjpeg20:2.3.1-1.el7
Red Hat Enterprise Linux 7openjpeg2-debuginfo0:2.3.1-1.el7
Red Hat Enterprise Linux 7openjpeg2-devel0:2.3.1-1.el7
Red Hat Enterprise Linux 7openjpeg2-devel-docs0:2.3.1-1.el7
Red Hat Enterprise Linux 7openjpeg2-tools0:2.3.1-1.el7
Red Hat Enterprise Linux 8openjpeg20:2.3.1-1.el8
Red Hat Enterprise Linux 8openjpeg2-debuginfo0:2.3.1-1.el8
Red Hat Enterprise Linux 8openjpeg2-debugsource0:2.3.1-1.el8
Red Hat Enterprise Linux 8openjpeg2-devel0:2.3.1-1.el8
Red Hat Enterprise Linux 8openjpeg2-devel-docs0:2.3.1-1.el8
Red Hat Enterprise Linux 8openjpeg2-tools0:2.3.1-1.el8
Red Hat Enterprise Linux 8openjpeg2-tools-debuginfo0:2.3.1-1.el8
SUSE Enterprise Storage 6openjpeg22.3.0-150000.3.5.1
SUSE Enterprise Storage 7openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP3openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP3openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Real Time 15 SP2openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP1-BCLopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP1-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP2-BCLopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP2-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2openjpeg22.3.0-150000.3.5.1
SUSE Manager Proxy 4.1openjpeg22.3.0-150000.3.5.1
SUSE Manager Retail Branch Server 4.1openjpeg22.3.0-150000.3.5.1
SUSE Manager Server 4.1openjpeg22.3.0-150000.3.5.1
Ubuntu 16.04 LTSopenjpeg22.1.2-1.1+deb9u3build0.16.04.1
Ubuntu 18.04 LTSopenjpeg22.3.0-2build0.18.04.1
openSUSE Leap 15.3openjpeg22.3.0-150000.3.5.1
openSUSE Tumbleweedghostscript9.54.0-2.2