CVE-2013-6053 - openjpeg: out-of-bounds memory read flaws in version 1.5.1

MEDIUM

openjpeg: out-of-bounds memory read flaws in version 1.5.1

Published Apr 27, 2014

5.0

MEDIUM

CVSS 2.0

EPSS 2.17%

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	openjpeg	Not affected	n/a
Red Hat Enterprise Linux 7	openjpeg	Not affected	n/a

Red Hat statement

Not Vulnerable. This issue does not affect the version of openjpeg as shipped with Red Hat Enterprise Linux 6.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS		x_refsource_CONFIRMVendor Advisory
http://seclists.org/oss-sec/2013/q4/412		mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/64121		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2013-6053		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1036493		x_refsource_MISCIssue Tracking
https://code.google.com/p/openjpeg/issues/detail?id=297		x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2013-6053
https://www.cve.org/CVERecord?id=CVE-2013-6053