Candidate: CVE-2016-9117 PublicDate: 2016-10-30 22:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9117 https://github.com/uclouvain/openjpeg/issues/860 Description: NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [6.5 MEDIUM] Patches_openjpeg2: upstream_openjpeg2: needs-triage precise_openjpeg2: DNE precise/esm_openjpeg2: DNE trusty_openjpeg2: DNE trusty/esm_openjpeg2: DNE vivid/stable-phone-overlay_openjpeg2: DNE vivid/ubuntu-core_openjpeg2: DNE xenial_openjpeg2: ignored (end of standard support, was needed) yakkety_openjpeg2: ignored (reached end-of-life) zesty_openjpeg2: ignored (reached end-of-life) artful_openjpeg2: ignored (reached end-of-life) bionic_openjpeg2: not-affected (2.2.0-1) cosmic_openjpeg2: not-affected (2.2.0-1) disco_openjpeg2: not-affected (2.2.0-1) eoan_openjpeg2: not-affected (2.2.0-1) focal_openjpeg2: not-affected (2.2.0-1) groovy_openjpeg2: not-affected (2.2.0-1) hirsute_openjpeg2: not-affected (2.2.0-1) impish_openjpeg2: not-affected (2.2.0-1) jammy_openjpeg2: not-affected (2.2.0-1) devel_openjpeg2: not-affected (2.2.0-1) Patches_ghostscript: upstream_ghostscript: needs-triage precise/esm_ghostscript: DNE trusty_ghostscript: ignored (out of standard support) trusty/esm_ghostscript: DNE xenial_ghostscript: not-affected (code not compiled) esm-infra/xenial_ghostscript: not-affected (code not compiled) bionic_ghostscript: not-affected (code not compiled) focal_ghostscript: not-affected (uses system openjpeg2) groovy_ghostscript: not-affected (uses system openjpeg2) hirsute_ghostscript: not-affected (uses system openjpeg2) impish_ghostscript: not-affected (uses system openjpeg2) jammy_ghostscript: not-affected (uses system openjpeg2) devel_ghostscript: not-affected (uses system openjpeg2) Patches_openjpeg: upstream_openjpeg: needs-triage precise/esm_openjpeg: DNE trusty_openjpeg: ignored (out of standard support) trusty/esm_openjpeg: needs-triage xenial_openjpeg: ignored (end of standard support, was needs-triage) bionic_openjpeg: DNE focal_openjpeg: DNE groovy_openjpeg: DNE hirsute_openjpeg: DNE impish_openjpeg: DNE jammy_openjpeg: DNE devel_openjpeg: DNE