Multiple vulnerabilities have been discovered in OpenCV, the worst of which may result in a denial of service condition.

Announced

2017-12-14

Revised

2017-12-14

Access

remote

Bugs

#627230 #627958

Advisory

https://security.gentoo.org/glsa/201712-02

Affected packages

Package	Arch	Vulnerable	Unaffected
media-libs/opencv	*	< 2.4.13-r3	>= 2.4.13-r3

Background

OpenCV (Open Source Computer Vision Library) is an open source computer vision and machine learning software library.

Description

Multiple vulnerabilities have been discovered in OpenCV. Please review the referenced CVE identifiers for details.

Impact

An attacker can cause a denial of service condition or conduct other memory corruption attacks.

Workaround

There are no known workarounds at this time.

Resolution

All OpenCV users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/opencv-2.4.13-r3"

References

• CVE-2017-12597
• CVE-2017-12598
• CVE-2017-12599
• CVE-2017-12600
• CVE-2017-12601
• CVE-2017-12602
• CVE-2017-12603
• CVE-2017-12604
• CVE-2017-12605
• CVE-2017-12606
• CVE-2017-12862
• CVE-2017-12863
• CVE-2017-12864
• CVE-2017-14136