An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1652 advisory.

    This advisory aggregates security fixes for the openjpeg2 SRPM in CIQ LTS 9.2. It addresses 30 CVEs:
    CVE-2016-9580, CVE-2016-3182, CVE-2016-9573, CVE-2021-3575, CVE-2017-12982, and 25 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was
    found in openjpeg 2.1.2. (CVE-2016-9581)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0125 advisory.

    This advisory aggregates security fixes for the openjpeg2 SRPM in CIQ LTS 8.6. It addresses 34 CVEs:
    CVE-2018-5727, CVE-2016-9573, CVE-2021-3575, CVE-2017-12982, CVE-2019-12973, and 29 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was     found in openjpeg 2.1.2. (CVE-2016-9581)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap
    buffer overflow. (CVE-2016-9580)

  - An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was
    found in openjpeg 2.1.2. (CVE-2016-9581)

The remote host is affected by the vulnerability described in GLSA-201710-26 (OpenJPEG: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenJPEG. Please review       the references below for details.
  Impact :

    A remote attacker, via a crafted BMP, PDF, or j2k document, could       execute arbitrary code, cause a Denial of Service condition, or have       other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

New openjpeg packages are available for Slackware 14.2 and -current to fix security issues.

This update for openjpeg2 fixes the following issues :

  - CVE-2016-9572 CVE-2016-9573: Insuficient check in     imagetopnm() could lead to heap buffer overflow     [bsc#1014543]

  - CVE-2016-9580, CVE-2016-9581: Possible Heap buffer     overflow via integer overflow and infite loop     [bsc#1014975]

  - CVE-2016-7445: NULL pointer dereference in convert.c     could lead to crash [bsc#999817]

  - CVE-2016-8332: Malicious file in OpenJPEG JPEG2000     format could lead to code execution [bsc#1002414]

  - CVE-2016-9112: FPE(Floating Point Exception) in     lib/openjp2/pi.c:523 [bsc#1007747]

  - CVE-2016-9113: NULL point dereference in function     imagetobmp of convertbmp.c could lead to crash     [bsc#1007739]

  - CVE-2016-9114: NULL pointer Access in function     imagetopnm of convert.c:1943(jp2) could lead to crash     [bsc#1007740]

  - CVE-2016-9115: Heap Buffer Overflow in function     imagetotga of convert.c(jp2) [bsc#1007741]

  - CVE-2016-9116: NULL pointer Access in function     imagetopnm of convert.c:2226(jp2) [bsc#1007742]

  - CVE-2016-9117: NULL pointer Access in function     imagetopnm of convert.c(jp2):1289 [bsc#1007743]

  - CVE-2016-9118: Heap Buffer Overflow in function     pnmtoimage of convert.c [bsc#1007744]

This update for openjpeg2 fixes the following issues :

  - CVE-2016-9114: NULL pointer Access in function     imagetopnm of convert.c:1943(jp2) could lead to crash     [bsc#1007740]

  - CVE-2016-9115: Heap Buffer Overflow in function     imagetotga of convert.c(jp2) [bsc#1007741]

  - CVE-2016-9580, CVE-2016-9581: Possible Heap buffer     overflow via integer overflow and infite loop     [bsc#1014975]

  - CVE-2016-9117: NULL pointer Access in function     imagetopnm of convert.c(jp2):1289 [bsc#1007743]

  - CVE-2016-9118: Heap Buffer Overflow in function     pnmtoimage of convert.c [bsc#1007744] 

  - CVE-2016-9112: FPE(Floating Point Exception) in     lib/openjp2/pi.c:523 [bsc#1007747] 

  - CVE-2016-9116: NULL pointer Access in function     imagetopnm of convert.c:2226(jp2) [bsc#1007742]

  - CVE-2016-9113: NULL point dereference in function     imagetobmp of convertbmp.c could lead to crash     [bsc#1007739] 

  - CVE-2016-9572 CVE-2016-9573: Insuficient check in     imagetopnm() could lead to heap buffer overflow     [bsc#1014543]

  - CVE-2016-8332: Malicious file in OpenJPEG JPEG2000     format could lead to code execution [bsc#1002414] 

  - CVE-2016-7445: NULL pointer dereference in convert.c     could lead to crash [bsc#999817] 

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update fixes CVE-2016-9580 and CVE-2016-9581.

----

This update adds a patch to fix CVE-2016-9573 and CVE-2016-9572.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes CVE-2016-9580 and CVE-2016-9581.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openjpeg2 fixes the following issues :

  - CVE-2016-9114: NULL pointer Access in function     imagetopnm of convert.c:1943(jp2) could lead to crash     [bsc#1007740]

  - CVE-2016-9115: Heap Buffer Overflow in function     imagetotga of convert.c(jp2) [bsc#1007741]

  - CVE-2016-9580, CVE-2016-9581: Possible Heap buffer     overflow via integer overflow and infite loop     [bsc#1014975]

  - CVE-2016-9117: NULL pointer Access in function     imagetopnm of convert.c(jp2):1289 [bsc#1007743]

  - CVE-2016-9118: Heap Buffer Overflow in function     pnmtoimage of convert.c [bsc#1007744]

  - CVE-2016-9112: FPE(Floating Point Exception) in     lib/openjp2/pi.c:523 [bsc#1007747]

  - CVE-2016-9116: NULL pointer Access in function     imagetopnm of convert.c:2226(jp2) [bsc#1007742]

  - CVE-2016-9113: NULL point dereference in function     imagetobmp of convertbmp.c could lead to crash     [bsc#1007739]

  - CVE-2016-9572 CVE-2016-9573: Insuficient check in     imagetopnm() could lead to heap buffer overflow     [bsc#1014543]

  - CVE-2016-8332: Malicious file in OpenJPEG JPEG2000     format could lead to code execution [bsc#1002414]

  - CVE-2016-7445: NULL pointer dereference in convert.c     could lead to crash [bsc#999817]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
369904	Rocky Linux 9.2 [CIQ] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-tools Multiple Vulnerabilities (ciqsa-2026_1652)	Nessus	Rocky Linux Local Security Checks	Local	critical
464286	Echo: openjpeg2: security update to 2.1.2	Tenable Cloud Security	Echo Local Security Checks	Local	high
464286	Echo: openjpeg2: security update to 2.1.2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
354496	Rocky Linux 8.6 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0125)	Nessus	Rocky Linux Local Security Checks	Local	critical
254222	Linux Distros Unpatched Vulnerability : CVE-2016-9581	Nessus	Misc.	Local	high
424246	Alpine: multiple openjpeg packages: security update to 2.1.2-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
424246	Alpine: multiple openjpeg packages: security update to 2.1.2-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
400953	Alpine: multiple openjpeg packages: security update to 2.1.2-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
400953	Alpine: multiple openjpeg packages: security update to 2.1.2-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
104069	GLSA-201710-26 : OpenJPEG: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
103704	Slackware 14.2 / current : openjpeg (SSA:2017-279-02)	Nessus	Slackware Local Security Checks	Local	high
96646	openSUSE Security Update : openjpeg2 (openSUSE-2017-120)	Nessus	SuSE Local Security Checks	Local	high
96580	openSUSE Security Update : openjpeg2 (openSUSE-2017-108)	Nessus	SuSE Local Security Checks	Local	high
96577	openSUSE Security Update : openjpeg2 (openSUSE-2017-101)	Nessus	SuSE Local Security Checks	Local	high
96211	Fedora 25 : mingw-openjpeg2 (2016-89ee54c661)	Nessus	Fedora Local Security Checks	Local	high
96202	Fedora 24 : mingw-openjpeg2 (2016-52a1b18397)	Nessus	Fedora Local Security Checks	Local	high
96201	Fedora 24 : openjpeg2 (2016-3b7f39a8c1)	Nessus	Fedora Local Security Checks	Local	high
96147	SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2016:3270-1)	Nessus	SuSE Local Security Checks	Local	high
95946	Fedora 25 : openjpeg2 (2016-c404a59411)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2016-9581

high

Tenable Plugins

critical

high

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high