Linux · Ubuntu · Package update · January 7, 2018

python-opencv 3.2.0+dfsg-4ubuntu0.1: python-opencv 3.2.0+dfsg-4ubuntu0.1 for Ubuntu 18.04.6 LTS (bionic)

python-opencv 3.2.0+dfsg-4ubuntu0.1, released January 7, 2018, fixes 20 CVEs in python-opencv. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
20
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0326
88th percentile

Priority of the 20 CVEs

Patch now 0 Urgent 0 High 0 Routine 20

Fixed package versions

ProductReleaseFixed in
python-opencvUbuntu 18.04.6 LTS (bionic)3.2.0+dfsg-4ubuntu0.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2017-1000450 libopencv3.2-java: In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, whic...n/a 0.0326 None reported
Routine CVE-2017-12862 libopencv3.2-java: In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause...n/a 0.0309 None reported
Routine CVE-2017-12602 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demon...n/a 0.0299 None reported
Routine CVE-2017-12863 libopencv3.2-java: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate s...n/a 0.0272 None reported
Routine CVE-2017-12864 libopencv3.2-java: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to i...n/a 0.0272 None reported
Routine CVE-2016-1516 libopencv-ml3.2: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.n/a 0.0235 None reported
Routine CVE-2017-17760 libopencv-imgproc3.2: OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect si...n/a 0.0225 None reported
Routine CVE-2017-12600 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstr...n/a 0.0224 None reported
Routine CVE-2017-12601 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData functi...n/a 0.0209 None reported
Routine CVE-2017-12597 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRo...n/a 0.0199 None reported
Routine CVE-2017-12598 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::read...n/a 0.0199 None reported
Routine CVE-2017-12599 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2...n/a 0.0199 None reported
Routine CVE-2017-12603 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes funct...n/a 0.0199 None reported
Routine CVE-2017-12604 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor functio...n/a 0.0199 None reported
Routine CVE-2017-12605 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 functi...n/a 0.0199 None reported
Routine CVE-2017-12606 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRo...n/a 0.0199 None reported
Routine CVE-2017-14136 libopencv3.2-java: OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in ut...n/a 0.0164 None reported
Routine CVE-2018-5268 libopencv3.2-java: In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/...n/a 0.0152 None reported
Routine CVE-2018-5269 libopencv-videoio3.2: In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because...n/a 0.0138 None reported
Routine CVE-2016-1517 libopencv3.2-java: OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.n/a 0.0108 None reported
Showing 1 to 20 of 20 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.