CVE-2017-12864
high
CVSS v3
8.8
CVSS v2
6.8
VIR risk
8.8
Description
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Predictions
Exploit likelihood
92%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2017-12864
Vendor advisory: cve@mitre.org — https://github.com/opencv/opencv/issues/9372
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | fixed | 3.2.0+dfsg-6 |
| debian | bullseye | fixed | 3.2.0+dfsg-6 |
| debian | forky | fixed | 3.2.0+dfsg-6 |
| debian | sid | fixed | 3.2.0+dfsg-6 |
| debian | trixie | fixed | 3.2.0+dfsg-6 |
| debian | 8.0 | affected | |
| debian | 9.0 | affected | |
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| PyPI | opencv-contrib-python | <3.3.1.11 | 3.3.1.11 |
| PyPI | opencv-python | <3.3.1.11 | 3.3.1.11 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| opencv | opencv | {"endIncluding":"3.3.0"} | |
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-12864
- https://github.com/opencv/opencv/issues/9372
- https://github.com/opencv/opencv/pull/9376
- https://github.com/opencv/opencv-python
- https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
- https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html
- https://security.gentoo.org/glsa/201712-02
- https://security-tracker.debian.org/tracker/CVE-2017-12864
CWEs
CWE-190
Verify integrity in audit chain (admin only). AS-IS.