CVE-2017-14136
libopencv3.2-java: OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in ut...
CVE-2017-14136 is fixed in 23 products on 1 platform, first by libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1, released January 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0164
76th percentile
OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libopencv-calib3d3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-contrib3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-contrib3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-core3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-core3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-features2d3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-features2d3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-flann3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-flann3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-highgui3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-highgui3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-imgcodecs3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-imgcodecs3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-imgproc3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-imgproc3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-ml3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-ml3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-objdetect3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-objdetect3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-photo3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-photo3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-shape3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-shape3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-stitching3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-stitching3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-superres3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-superres3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-video3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-video3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-videoio3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-videoio3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-videostab3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-videostab3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv-viz3.2 · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv-viz3.2 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv3.2-java · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv3.2-java 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| libopencv3.2-jni · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | libopencv3.2-jni 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| opencv-data · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | opencv-data 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| python-opencv · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | python-opencv 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |
| python3-opencv · Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | python3-opencv 3.2.0+dfsg-4ubuntu0.1 | Jan 7, 2018 |