CVE-2017-12600: Denial of Service in OpenCV
Summary
CVE-2017-12600: Denial of Service in OpenCV. Affects opencv-python versions < 3.3.1.11. Fixed in 3.3.1.11. How to fix ↓
Also tracked for
- opencv-contrib-python · PyPI
- opencv · Debian:11
The same CVE-2017-12600 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenCV (Open Source Computer Vision Library) is a popular open-source library for computer vision and machine learning applications. It provides various functions and algorithms for image and video processing, object detection, and more. OpenCV-Python is the Python wrapper for OpenCV. However, versions up to 3.3.0.9 of OpenCV and OpenCV-Python are vulnerable to a denial of service (CPU consumption) issue.
Vulnerability Detail
The vulnerability in OpenCV-Python versions up to 3.3.0.9 allows an attacker to cause a denial of service by consuming excessive CPU resources. This can be exploited by providing specially crafted input to the library, leading to high CPU usage and potentially impacting the availability of the system. The vulnerability has a CVSSv3 score of 7.5, indicating a high severity level.
How To Fix
Minimum fixed version
3.3.1.11
This is the first release that contains the fix.
pip install --upgrade "opencv-python==3.3.1.11"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is advised to update to the fixed version as soon as possible.
Conclusion
The vulnerability in OpenCV-Python versions up to 3.3.0.9 can lead to a denial of service by consuming excessive CPU resources. It is crucial to update to version 3.3.1.11 or later to mitigate the risk. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for opencv-python →
FAQ
OpenCV is an open-source computer vision library that provides functions and algorithms for image and video processing, object detection, and more.
The vulnerability can lead to a denial of service by consuming excessive CPU resources, potentially impacting the availability of the system.
Versions up to 3.3.0.9 of OpenCV-Python are affected by this vulnerability.
To fix the vulnerability, update OpenCV-Python to version 3.3.1.11 or later.
No, there is no specific workaround available. It is recommended to update to the fixed version.
References
Related vulnerabilities
Recent vulnerabilities recorded for opencv-python.
