CVE-2016-4797
Summary
| CVE | CVE-2016-4797 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-02-03 16:59:00 UTC |
| Updated | 2023-11-07 02:32:00 UTC |
| Description | Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| oss-security - Re: CVE Request - OpenJPEG: Security Fixes |
MLIST |
www.openwall.com |
Mailing List, Patch, Third Party Advisory |
| Oracle Critical Patch Update Advisory - July 2020 |
MISC |
www.oracle.com |
|
| [SECURITY] Fedora 23 Update: openjpeg2-2.1.1-1.fc23 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 24 Update: openjpeg2-2.1.1-1.fc24 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
Patch, Third Party Advisory |
| [SECURITY] Fedora 24 Update: mingw-openjpeg2-2.1.1-1.fc24 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 23 Update: mingw-openjpeg2-2.1.1-1.fc23 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 24 Update: mingw-openjpeg2-2.1.1-1.fc24 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
Patch, Third Party Advisory |
| Bug 1335483 – CVE-2016-4797 openjpeg: Division-by-zero in function opj_tcd_init_tile in tcd.c |
CONFIRM |
bugzilla.redhat.com |
Issue Tracking, Patch |
| [SECURITY] Fedora 23 Update: mingw-openjpeg2-2.1.1-1.fc23 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
Patch, Third Party Advisory |
| Fix division by zero · uclouvain/openjpeg@8f9cc62 · GitHub |
CONFIRM |
github.com |
Issue Tracking, Patch, Third Party Advisory |
| [SECURITY] Fedora 24 Update: openjpeg2-2.1.1-1.fc24 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 23 Update: openjpeg2-2.1.1-1.fc23 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
Patch, Third Party Advisory |
| division-by-zero (SIGFPE) error in opj_tcd_init_tile function (line 730 of tcd.c) · Issue #733 · uclouvain/openjpeg · GitHub |
MISC |
github.com |
Issue Tracking, Patch, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 751971 SUSE Enterprise Linux Security Update for openjpeg2 (SUSE-SU-2022:1129-1)