CVE-2017-12599
libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2...
CVE-2017-12599 is fixed in 23 products on 1 platform, first by libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1, released January 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0199
80th percentile
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libopencv-calib3d3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-contrib3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-contrib3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-core3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-core3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-features2d3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-features2d3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-flann3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-flann3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-highgui3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-highgui3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-imgcodecs3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-imgcodecs3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-imgproc3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-imgproc3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-ml3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-ml3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-objdetect3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-objdetect3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-photo3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-photo3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-shape3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-shape3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-stitching3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-stitching3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-superres3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-superres3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-video3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-video3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-videoio3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-videoio3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-videostab3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-videostab3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-viz3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-viz3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv3.2-java · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv3.2-java 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv3.2-jni · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv3.2-jni 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| opencv-data · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | opencv-data 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| python-opencv · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | python-opencv 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| python3-opencv · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | python3-opencv 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |