CVE-2017-18009

2018-01-0108:29:00

Google

osv.dev

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

35.1%

JSON

In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

CPENameOperatorVersion
opencveq3.0.0
opencveq3.0.0-beta
opencveq2.4.4
opencveq2.4.10
opencveq2.4.7.1
opencveq2.4.4-beta
opencveq3.0.0-rc1
opencveq2.4.6.1
opencveq2.4.10.2
opencveq3.3.1-cvsdk

Name	Operator	Version
opencv	eq	3.0.0
opencv	eq	3.0.0-beta
opencv	eq	2.4.4
opencv	eq	2.4.10
opencv	eq	2.4.7.1
opencv	eq	2.4.4-beta
opencv	eq	3.0.0-rc1
opencv	eq	2.4.6.1
opencv	eq	2.4.10.2
opencv	eq	3.3.1-cvsdk