Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.

CVE-2015-1239 Fix for denial of service (process crash) via a crafted PDF.

CVE-2016-5139 Fix for integer overflows, allowing a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

For Debian 8 'Jessie', these problems have been fixed in version 2.1.0-2+deb8u4.

We recommend that you upgrade your openjpeg2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openjpeg2 fixes the following security issues :

  - CVE-2015-1239: A double free vulnerability in the     j2k_read_ppm_v3 function allowed remote attackers to     cause a denial of service (crash) (bsc#1066713)

  - CVE-2017-17479: A stack-based buffer overflow in the     pgxtoimage function in jpwl/convert.c could crash the     converter. (bsc#1072125)

  - CVE-2017-17480: A stack-based buffer overflow in the     pgxtovolume function in jp3d/convert.c could crash the     converter. (bsc#1072124)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for openjpeg2 fixes the following security issues :

  - CVE-2015-1239: A double free vulnerability in the     j2k_read_ppm_v3 function allowed remote attackers to     cause a denial of service (crash) (bsc#1066713)

  - CVE-2017-17479: A stack-based buffer overflow in the     pgxtoimage function in jpwl/convert.c could crash the     converter. (bsc#1072125)

  - CVE-2017-17480: A stack-based buffer overflow in the     pgxtovolume function in jp3d/convert.c could crash the     converter. (bsc#1072124)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
111170	Debian DLA-1433-1 : openjpeg2 security update	Nessus	Debian Local Security Checks	high
110064	openSUSE Security Update : openjpeg2 (openSUSE-2018-490)	Nessus	SuSE Local Security Checks	critical
110031	SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2018:1364-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2015-1239

medium

Tenable Plugins

high

critical

critical