Bug 971617 (CVE-2016-3183) - VUL-0: CVE-2016-3183: openjpeg2: Out-of-bounds read in sycc422_to_rgb function
Summary: VUL-0: CVE-2016-3183: openjpeg2: Out-of-bounds read in sycc422_to_rgb function
Status: RESOLVED FIXED
Alias: CVE-2016-3183
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/163488/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-03-17 13:58 UTC by Victor Pereira
Modified: 2022-06-10 10:23 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Victor Pereira 2016-03-17 13:58:42 UTC 
rh#1317821

our-of-bounds read vulnerability in sycc422_to_rgb function triggered by specially crafted JPEG2000 image file was found in openjpeg version 2016.03.14.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1317821
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3183
http://seclists.org/oss-sec/2016/q1/668
Comment 1 Swamp Workflow Management 2016-03-17 23:00:54 UTC 
bugbot adjusting priority
Comment 2 Asterios Dramis 2017-01-31 21:13:09 UTC 
This issue does not affect openjpeg but openjpeg2 (see also rh#1317821).
Comment 3 Michael Vetter 2019-03-29 10:11:31 UTC 
Upstream bug: https://github.com/uclouvain/openjpeg/issues/726
Upstream fix: https://github.com/uclouvain/openjpeg/commit/15f081c89650dccee4aa4ae66f614c3fdb268767.patch

I would propose to upgrade openjpeg to 2.3.0 in leap 42.3 to fix all the issues at once.
Comment 5 Hans Petter Jansson 2022-04-01 21:08:45 UTC 
Backported the upstream fix to SLE12. Submission at https://build.suse.de/request/show/268828 .

Other code streams are not affected.

Reassigning to security-team.
Comment 6 Swamp Workflow Management 2022-04-07 19:18:23 UTC 
SUSE-SU-2022:1129-1: An update that fixes 13 vulnerabilities is now available.

Category: security (important)
Bug References: 1102016,1106881,1106882,1140130,1140205,1162090,1173578,1180457,1184774,1197738,971617,980504
CVE References: CVE-2016-1924,CVE-2016-3183,CVE-2016-4797,CVE-2018-14423,CVE-2018-16375,CVE-2018-16376,CVE-2018-20845,CVE-2018-20846,CVE-2020-15389,CVE-2020-27823,CVE-2020-8112,CVE-2021-29338,CVE-2022-1122
JIRA References: 
Sources used:
SUSE OpenStack Cloud Crowbar 9 (src):    openjpeg2-2.1.0-4.15.1
SUSE OpenStack Cloud Crowbar 8 (src):    openjpeg2-2.1.0-4.15.1
SUSE OpenStack Cloud 9 (src):    openjpeg2-2.1.0-4.15.1
SUSE OpenStack Cloud 8 (src):    openjpeg2-2.1.0-4.15.1
SUSE Linux Enterprise Server for SAP 12-SP4 (src):    openjpeg2-2.1.0-4.15.1
SUSE Linux Enterprise Server for SAP 12-SP3 (src):    openjpeg2-2.1.0-4.15.1
SUSE Linux Enterprise Server 12-SP5 (src):    openjpeg2-2.1.0-4.15.1
SUSE Linux Enterprise Server 12-SP4-LTSS (src):    openjpeg2-2.1.0-4.15.1
SUSE Linux Enterprise Server 12-SP3-LTSS (src):    openjpeg2-2.1.0-4.15.1
SUSE Linux Enterprise Server 12-SP3-BCL (src):    openjpeg2-2.1.0-4.15.1
SUSE Linux Enterprise Server 12-SP2-BCL (src):    openjpeg2-2.1.0-4.15.1
HPE Helion Openstack 8 (src):    openjpeg2-2.1.0-4.15.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 7 Carlos López 2022-06-10 10:23:36 UTC 
Done, closing.