PT-2019-10274 · Openjpeg+7 · Openjpeg+7

CVE-2018-20845 · Published 2019-04-03 · Updated 2023-02-27

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, due to division-by-zero vulnerabilities in certain functions. Recommendations: For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue.

Fix

DoS

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

ALSA-2021:4251

ALT-PU-2019-1582

CESA-2021_4251

CVE-2018-20845

OPENSUSE-SU-2022_1252-1

OPENSUSE-SU-2024:13571-1

RHSA-2021:4251

RHSA-2021_4251

RLSA-2021:4251

SUSE-SU-2022:1129-1

SUSE-SU-2022:1252-1

USN-4782-1

Affected Products

Alt Linux

Almalinux

Centos

Openjpeg

Red Hat

Rocky Linux

Suse

Ubuntu

References · 86

• https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf · Patch
• https://ubuntu.com/security/CVE-2018-20845 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:4251 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4782-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-20845 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-20845 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-20845 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-4251.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10506 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1129-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-20845 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-20845 · Security Note
• https://ubuntu.com/security/CVE-2018-5727 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16375 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1252-1 · Vendor Advisory