CVE-2018-16375
libopenjp3d7: An issue was discovered in OpenJPEG 2.3.0
CVE-2018-16375 is fixed in 8 products on 1 platform, first by libopenjp2-7 2.3.0-2ubuntu0.1~esm1, released June 26, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0226
83rd percentile
An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libopenjp2-7 · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjp2-7 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |
| libopenjp2-tools · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjp2-tools 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |
| libopenjp3d-tools · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjp3d-tools 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |
| libopenjp3d7 · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjp3d7 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |
| libopenjpip-dec-server · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjpip-dec-server 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |
| libopenjpip-server · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjpip-server 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |
| libopenjpip-viewer · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjpip-viewer 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |
| libopenjpip7 · Ubuntu 18.04.6 LTS (bionic) | 2.3.0-2ubuntu0.1~esm1 | libopenjpip7 2.3.0-2ubuntu0.1~esm1 | Jun 26, 2019 |