Candidate: CVE-2016-9112 PublicDate: 2016-10-29 10:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9112 https://github.com/uclouvain/openjpeg/issues/855 Description: Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2. Ubuntu-Description: It was discovered that OpenJPEG incorrectly handled certain image files. A remote attacker could possibly use this issue to cause a denial of service. Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH] Patches_openjpeg2: upstream_openjpeg2: released (2.2.0) precise_openjpeg2: DNE precise/esm_openjpeg2: DNE trusty_openjpeg2: DNE trusty/esm_openjpeg2: DNE vivid/stable-phone-overlay_openjpeg2: DNE vivid/ubuntu-core_openjpeg2: DNE xenial_openjpeg2: released (2.1.2-1.1+deb9u5build0.16.04.1) yakkety_openjpeg2: ignored (reached end-of-life) zesty_openjpeg2: ignored (reached end-of-life) artful_openjpeg2: ignored (reached end-of-life) bionic_openjpeg2: not-affected (2.2.0-1) cosmic_openjpeg2: not-affected (2.2.0-1) disco_openjpeg2: not-affected (2.2.0-1) eoan_openjpeg2: not-affected (2.2.0-1) focal_openjpeg2: not-affected (2.2.0-1) devel_openjpeg2: not-affected (2.2.0-1)