NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function
    in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG
    before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k
    files. (CVE-2016-10505)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function     in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG     before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k     files. (CVE-2016-10505)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the openjpeg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - NULL pointer dereference vulnerabilities in the     imagetopnm function in convert.c, sycc444_to_rgb     function in color.c, color_esycc_to_rgb function in     color.c, and sycc422_to_rgb function in color.c in     OpenJPEG before 2.2.0 allow remote attackers to cause a     denial of service (application crash) via crafted j2k     files.(CVE-2016-10505)

  - convert.c in OpenJPEG before 2.1.2 allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via vectors     involving the variable s.(CVE-2016-7445)

  - Division-by-zero vulnerabilities in the functions     pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in     lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow     remote attackers to cause a denial of service     (application crash).(CVE-2018-14423)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A stack-based buffer overflow was discovered in the     pgxtoimage function in bin/jp2/convert.c in OpenJPEG     2.2.0. The vulnerability causes an out-of-bounds write,     which may lead to remote denial of service or possibly     remote code execution.(CVE-2017-14041)

  - An invalid write access was discovered in     bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash     in the tgatoimage function. The vulnerability may lead     to remote denial of service or possibly unspecified     other impact.(CVE-2017-14040)

  - convert.c in OpenJPEG before 2.1.2 allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via vectors     involving the variable s.(CVE-2016-7445)

  - Heap-based buffer overflow in the JPEG2000 image tile     decoder in OpenJPEG before 1.5.2 allows remote     attackers to cause a denial of service (application     crash) or possibly have unspecified other impact via a     crafted file because of incorrect j2k_decode,     j2k_read_eoc, and tcd_decode_tile interaction, a     related issue to CVE-2013-6045. NOTE: this is not a     duplicate of CVE-2013-1447, because the scope of     CVE-2013-1447 was specifically defined in     http://openwall.com/lists/oss-security/2013/12/04/6 as     only 'null pointer dereferences, division by zero, and     anything that would just fit as DoS.'(CVE-2014-0158)

  - In OpenJPEG 2.3.0, a stack-based buffer overflow was     discovered in the pgxtoimage function in     jpwl/convert.c. The vulnerability causes an     out-of-bounds write, which may lead to remote denial of     service or possibly remote code     execution.(CVE-2017-17479)

  - NULL pointer dereference vulnerabilities in the     imagetopnm function in convert.c, sycc444_to_rgb     function in color.c, color_esycc_to_rgb function in     color.c, and sycc422_to_rgb function in color.c in     OpenJPEG before 2.2.0 allow remote attackers to cause a     denial of service (application crash) via crafted j2k     files.(CVE-2016-10505)

  - OpenJPEG 1.5.1 allows remote attackers to cause a     denial of service via unspecified vectors that trigger     NULL pointer dereferences, division-by-zero, and other     errors.(CVE-2013-6887)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - NULL pointer dereference vulnerabilities in the     imagetopnm function in convert.c, sycc444_to_rgb     function in color.c, color_esycc_to_rgb function in     color.c, and sycc422_to_rgb function in color.c in     OpenJPEG before 2.2.0 allow remote attackers to cause a     denial of service (application crash) via crafted j2k     files.(CVE-2016-10505)

  - OpenJPEG 1.5.1 allows remote attackers to cause a     denial of service via unspecified vectors that trigger     NULL pointer dereferences, division-by-zero, and other     errors.(CVE-2013-6887)

  - convert.c in OpenJPEG before 2.1.2 allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via vectors     involving the variable s.(CVE-2016-7445)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - convert.c in OpenJPEG before 2.1.2 allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via vectors     involving the variable s.(CVE-2016-7445)

  - NULL pointer dereference vulnerabilities in the     imagetopnm function in convert.c, sycc444_to_rgb     function in color.c, color_esycc_to_rgb function in     color.c, and sycc422_to_rgb function in color.c in     OpenJPEG before 2.2.0 allow remote attackers to cause a     denial of service (application crash) via crafted j2k     files.(CVE-2016-10505)

  - Division-by-zero vulnerabilities in the functions     opj_pi_next_cprl, opj_pi_next_pcrl, and     opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow     remote attackers to cause a denial of service     (application crash) via crafted j2k     files.(CVE-2016-10506)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - convert.c in OpenJPEG before 2.1.2 allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via vectors     involving the variable s.(CVE-2016-7445)

  - NULL pointer dereference vulnerabilities in the     imagetopnm function in convert.c, sycc444_to_rgb     function in color.c, color_esycc_to_rgb function in     color.c, and sycc422_to_rgb function in color.c in     OpenJPEG before 2.2.0 allow remote attackers to cause a     denial of service (application crash) via crafted j2k     files.(CVE-2016-10505)

  - Division-by-zero vulnerabilities in the functions     opj_pi_next_cprl, opj_pi_next_pcrl, and     opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow     remote attackers to cause a denial of service     (application crash) via crafted j2k     files.(CVE-2016-10506)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201710-26 (OpenJPEG: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenJPEG. Please review       the references below for details.
  Impact :

    A remote attacker, via a crafted BMP, PDF, or j2k document, could       execute arbitrary code, cause a Denial of Service condition, or have       other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
455353	Echo: openjpeg2: security update to 2.5.3-2.1~deb13u1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
455353	Echo: openjpeg2: security update to 2.5.3-2.1~deb13u1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
219397	Linux Distros Unpatched Vulnerability : CVE-2016-10505	Nessus	Misc.	Local	medium
132803	EulerOS Virtualization for ARM 64 3.0.5.0 : openjpeg2 (EulerOS-SA-2020-1049)	Nessus	Huawei Local Security Checks	Local	high
132174	EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2019-2639)	Nessus	Huawei Local Security Checks	Local	critical
131656	EulerOS 2.0 SP2 : openjpeg (EulerOS-SA-2019-2503)	Nessus	Huawei Local Security Checks	Local	high
130820	EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2019-2111)	Nessus	Huawei Local Security Checks	Local	high
130819	EulerOS 2.0 SP8 : openjpeg (EulerOS-SA-2019-2110)	Nessus	Huawei Local Security Checks	Local	high
130639	EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2019-2177)	Nessus	Huawei Local Security Checks	Local	high
104069	GLSA-201710-26 : OpenJPEG: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high

Detections

Analytics

CVE-2016-10505

medium

Tenable Plugins

medium

medium

medium

high

critical

high

high

high

high

high