OpenJPEG CVE-2016-9572 Null Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	109233
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2016-9572
Remote:	Yes
Local:	No
Published:	Jul 17 2019 12:00AM
Updated:	Jul 17 2019 12:00AM
Credit:	twelveand0
Vulnerable:	Oracle Database Server 18c Oracle Database Server 12.1.0.2 OpenJPEG OpenJPEG 2.1.2
Not Vulnerable:

OpenJPEG CVE-2016-9572 Null Pointer Dereference Denial of Service Vulnerability

OpenJPEG is prone to a denial-of-service vulnerability.

Attackers can exploit these issues to crash the application, denying service to legitimate users.

OpenJPEG 2.1.2 is vulnerable; other versions may also be affected.

OpenJPEG CVE-2016-9572 Null Pointer Dereference Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenJPEG CVE-2016-9572 Null Pointer Dereference Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenJPEG CVE-2016-9572 Null Pointer Dereference Denial of Service Vulnerability

References:

• OpenJPEG Homepage (OpenJPEG)
  
• Openjpeg-2.1.2 (uclouvain)
  
• Red Hat Bugzilla �?? Bug 1402714 (Red Hat Bugzilla)
  
• OpenJPEG: Multiple vulnerabilities �?? GLSA 201710-26 (Gentoo)
  
• Oracle Critical Patch Update Advisory - July 2019 (Oracle)