CVE-2015-6581

2015-09-0322:59:00

Debian Security Bug Tracker

security-tracker.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.042 Low

EPSS

Percentile

92.2%

JSON

Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.

OSVersionArchitecturePackageVersionFilename
Debian12allopenjpeg2< 2.1.1-1openjpeg2_2.1.1-1_all.deb
Debian11allopenjpeg2< 2.1.1-1openjpeg2_2.1.1-1_all.deb
Debian10allopenjpeg2< 2.1.1-1openjpeg2_2.1.1-1_all.deb
Debian999allopenjpeg2< 2.1.1-1openjpeg2_2.1.1-1_all.deb
Debian13allopenjpeg2< 2.1.1-1openjpeg2_2.1.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openjpeg2	< 2.1.1-1	openjpeg2_2.1.1-1_all.deb
Debian	11	all	openjpeg2	< 2.1.1-1	openjpeg2_2.1.1-1_all.deb
Debian	10	all	openjpeg2	< 2.1.1-1	openjpeg2_2.1.1-1_all.deb
Debian	999	all	openjpeg2	< 2.1.1-1	openjpeg2_2.1.1-1_all.deb
Debian	13	all	openjpeg2	< 2.1.1-1	openjpeg2_2.1.1-1_all.deb