CVE-2017-12864
libopencv3.2-java: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to i...
CVE-2017-12864 is fixed in 23 products on 1 platform, first by libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1, released January 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0272
86th percentile
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libopencv-calib3d3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-contrib3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-contrib3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-core3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-core3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-features2d3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-features2d3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-flann3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-flann3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-highgui3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-highgui3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-imgcodecs3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-imgcodecs3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-imgproc3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-imgproc3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-ml3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-ml3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-objdetect3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-objdetect3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-photo3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-photo3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-shape3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-shape3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-stitching3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-stitching3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-superres3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-superres3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-video3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-video3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-videoio3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-videoio3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-videostab3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-videostab3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-viz3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-viz3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv3.2-java · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv3.2-java 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv3.2-jni · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv3.2-jni 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| opencv-data · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | opencv-data 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| python-opencv · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | python-opencv 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| python3-opencv · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | python3-opencv 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |