MGASA-2017-0051 Updated openjpeg2 packages fix security vulnerabilities

Floating Point Exception aka FPE or divide by zero in opjpinextcprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2. CVE-2016-9112 There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image-comps0.data is not assigned a value after initializationNULL...

Updated openjpeg2 packages fix security vulnerabilities

Floating Point Exception aka FPE or divide by zero in opjpinextcprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2. CVE-2016-9112 There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image-comps0.data is not assigned a value after initializationNULL...

Out-of-bounds

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg2000 file...

UBUNTU-CVE-2016-4797

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

UBUNTU-CVE-2016-3183

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg2000 file...

Design/Logic Flaw

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

CVE-2016-4796

Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...

Heap overflow

Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...

CVE-2016-4796

Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...

CVE-2016-3183

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg2000 file...

DEBIAN-CVE-2016-3183

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg2000 file...

DEBIAN-CVE-2016-4797

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

CVE-2016-4797

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

CVE-2016-4797

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

CVE-2016-3183

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg2000 file...

CVE-2016-4796

Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...

DEBIAN-CVE-2016-4796

Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...

CVE-2016-3183

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg2000 file...

CVE-2016-4797

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

CVE-2016-4796

CVE-2016-4796 : In OpenJPEG, a heap-based buffer overflow in color_cmyk_to_rgb (color.c) on OpenJPEG before 2.1.1 allows crafted JPEG 2000 files (.j2k) to cause a denial of service (crash). The NVD entry documents a medium severity (CVSS v3 base 5.5; CVSS v2 base 4.3) with network- or local-based...