PT-2023-9547 · Openjpeg+2 · Openjpeg+2

Tej Rathi · Publicado 2023-06-29 · Atualizado 2026-05-26 · CVE-2023-39328

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenJPEG (affected versions not specified)

Description A flaw in OpenJPEG allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file. The vulnerability is related to uncontrolled resource consumption, which can be exploited by an attacker to cause a denial of service using a specially crafted file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

AZL-43657

AZL-44982

BDU:2024-08389

CVE-2023-39328

ECHO-A156-A63C-CBE1

JLSEC-2026-549

OESA-2024-1846

Produtos afetados

Debian

Openjpeg

Red Os

Referências · 30

• https://github.com/uclouvain/openjpeg/issues/1471 · Nota
• https://github.com/uclouvain/openjpeg/pull/1470 · Nota
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1846 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-549 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1810678738671051005 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-08389 · Nota de Segurança
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-39328 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-39328 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=2219236 · Nota
• https://redos.red-soft.ru/support/secure · Nota
• https://osv.dev/vulnerability/BELL-CVE-2023-39328 · Aviso do Fabricante
• https://t.me/cveNotify/132686 · Publicação no Telegram
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2023-39328 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39328 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-44982 · Aviso do Fabricante