Improper input validation in openjpeg (Alpine package)

1) Improper input validation

EUVDB-ID: #VU11479

Risk: Low

CVSSv4.0: 2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2018-6616

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local unauthenticated attacker to cause DoS condition on the target system.

The weakness exists in the opj_t1_encode_cblks function, which is defined in the openjp2/t1.c source code file, due to insufficient validation of user-supplied input. A local attacker can submit a specially crafted BMP file and cause the service to crash.

Mitigation

Install update from vendor's website.

Vulnerable software versions

openjpeg (Alpine package): 2.3.0-r0

CPE2.3

• cpe:2.3:o:alpine:openjpeg_alpine_package:2.3.0-r0:*:*:*:*:alpine_linux:*:3.4

External links

https://git.alpinelinux.org/aports/commit/?id=18df15dbb366dab8b2d3261d3758f99b8524906d
https://git.alpinelinux.org/aports/commit/?id=f2c26c7c744245bc3ea738b6a304b4206ba171f4
https://git.alpinelinux.org/aports/commit/?id=12fd347ffe7f9822f46f4cb6f4841ab6fa558edd
https://git.alpinelinux.org/aports/commit/?id=50f991efc36983c48ef31001e2cb0433b2745479
https://git.alpinelinux.org/aports/commit/?id=b02bbf085421c6efa07378f71077a1a317428866

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.