CVE-2017-17480

Published: 08 December 2017

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

Priority

Medium

CVSS 3 base score: 9.8

Status

Package Release Status
openjpeg2
Launchpad, Ubuntu, Debian 		Upstream
Released (2.3.0-2)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (2.3.0-2build0.18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (2.1.2-1.1+deb9u3build0.16.04.1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

References

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading