CVE:CVE-2017-12601
CNNVD:CNNVD-201708-254
OpenCV是一个开源的、跨平台的、轻量级的计算机视觉库。
OpenCV 3.3及之前的版本中的modules/imgcodecs/src/grfmt_bmp.cpp文件的‘cv::BmpDecoder::readData’函数存在缓冲区溢出漏洞。攻击者可利用该漏洞造成拒绝服务（堆溢出和越边界读取）。
solution:Upgrade opencv opencv to a higher version than 3.3.0,and avoid the version (,3.3.0]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0