PT-2019-10274 · Openjpeg+7 · Openjpeg+7

CVE-2018-20845 · Publicado 2019-04-03 · Atualizado 2023-02-27

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, due to division-by-zero vulnerabilities in certain functions. Recommendations: For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue.

Correção

DoS

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

ALSA-2021:4251

ALT-PU-2019-1582

CESA-2021_4251

CVE-2018-20845

OPENSUSE-SU-2022_1252-1

OPENSUSE-SU-2024:13571-1

RHSA-2021:4251

RHSA-2021_4251

RLSA-2021:4251

SUSE-SU-2022:1129-1

SUSE-SU-2022:1252-1

USN-4782-1

Produtos afetados

Alt Linux

Almalinux

Centos

Openjpeg

Red Hat

Rocky Linux

Suse

Ubuntu

Referências · 86

• https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf · Correção
• https://vulners.com/cve/CVE-2020-27843 · Nota
• https://suse.com/security/cve/CVE-2020-27823 · Nota
• https://bugzilla.suse.com/1160782 · Nota
• https://bugzilla.suse.com/1076314 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1536552 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1901998 · Nota
• https://bugzilla.suse.com/1102016 · Nota
• https://vulners.com/cve/CVE-2021-3575 · Nota
• https://ubuntu.com/security/CVE-2018-20845 · Aviso do Fabricante
• https://bugzilla.suse.com/980504 · Nota
• https://errata.rockylinux.org/RLSA-2021:4251 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1905723 · Nota
• https://bugzilla.suse.com/1140130 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1957616 · Nota