CVE:CVE-2017-12863
CNNVD:CNNVD-201708-632
OpenCV是一个开源的、跨平台的、轻量级的计算机视觉库。
OpenCV 3.3及之前的版本中的opencv/modules/imgcodecs/src/grfmt_pxm.cpp文件的‘PxMDecoder::readData’函数存在整数溢出漏洞。远程攻击者可利用该漏洞执行代码或造成拒绝服务。
solution:Upgrade opencv opencv to a higher version than 3.3.0,and avoid the version (,3.3.0]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0