CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

Link	Resource
https://github.com/uclouvain/openjpeg/commit/8ee335227bbcaf1614124046aa25e53d67b11ec3	Patch Third Party Advisory
https://github.com/uclouvain/openjpeg/pull/1185/commits/cbe7384016083eac16078b359acd7a842253d503	Broken Link
http://www.securityfocus.com/bid/108900	Third Party Advisory VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html	Mailing List Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	Third Party Advisory
https://security.gentoo.org/glsa/202101-29	Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html	Third Party Advisory

Configuration 1

cpe:2.3:a:uclouvain:openjpeg:2.3.1:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:* cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*

---

Published : 2019-06-26 06:15

Updated : 2022-10-05 08:37

---

NVD link : CVE-2019-12973

Mitre link : CVE-2019-12973

No products.

CWE-834