Test ID:	1.3.6.1.4.1.25623.1.1.12.2025.7247.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-7247-1)
Summary:	The remote host is missing an update for the 'opencv' package(s) announced via the USN-7247-1 advisory.
Description:	Summary: The remote host is missing an update for the 'opencv' package(s) announced via the USN-7247-1 advisory. Vulnerability Insight: It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. If a user were tricked into loading a specially crafted file, a remote attacker could possibly use this issue to make OpenCV crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-14493) It was discovered that OpenCV may perform out-of-bounds reads in certain situations. An attacker could possibly use this issue to cause OpenCV to crash, resulting in a denial of service, or the execution of arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-16249, CVE-2019-19624) It was discovered that the QR code module of OpenCV incorrectly processed certain maliciously crafted QR codes. A remote attacker could possibly use this issue to cause OpenCV to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-2617, CVE-2023-2618) Affected Software/OS: 'opencv' package(s) on Ubuntu 18.04, Ubuntu 22.04. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-14493 https://github.com/opencv/opencv/compare/371bba8...ddbd10c https://github.com/opencv/opencv/issues/15127 https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html Common Vulnerability Exposure (CVE) ID: CVE-2019-16249 https://github.com/opencv/opencv/issues/15481 Common Vulnerability Exposure (CVE) ID: CVE-2019-19624 https://github.com/opencv/opencv/commit/d1615ba11a93062b1429fce9f0f638d1572d3418 https://github.com/opencv/opencv/issues/14554 Common Vulnerability Exposure (CVE) ID: CVE-2023-2617 https://gist.github.com/GZTimeWalker/3ca70a8af2f5830711e9cccc73fb5270 https://github.com/opencv/opencv_contrib/pull/3480 https://vuldb.com/?ctiid.228547 https://vuldb.com/?id.228547 Common Vulnerability Exposure (CVE) ID: CVE-2023-2618 https://github.com/opencv/opencv_contrib/pull/3484 https://github.com/opencv/opencv_contrib/pull/3484/commits/2b62ff6181163eea029ed1cab11363b4996e9cd6 https://vuldb.com/?ctiid.228548 https://vuldb.com/?id.228548
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.