Alpine/openjpeg: medium 5.5
The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocatio
Action: Upgrade openjpeg to 2.1.2-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.2-r2 | - |
Fixed versions
| 2.1.2-r2 |
Sources
- osv: ALPINE-CVE-2017-12982#Alpine:v3.3/openjpeg
- https://security.alpinelinux.org/vuln/CVE-2017-12982
published · modified · JSON