Lucene search

K

RedhatCVELIST:CVE-2020-27843

HistoryJan 05, 2021 - 5:22 p.m.

CVE-2020-27843

2021-01-0517:22:06

CWE-125

redhat

www.cve.org

1

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.

CNA Affected

[
  {
    "product": "openjpeg",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "openjpeg 2.4.0"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1907516

lists.debian.org/debian-lts-announce/2022/04/msg00006.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/

security.gentoo.org/glsa/202101-29

www.debian.org/security/2021/dsa-4882

www.oracle.com//security-alerts/cpujul2021.html

www.oracle.com/security-alerts/cpuApr2021.html

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

Related for CVELIST:CVE-2020-27843

prion1 redhatcve1 ubuntucve1 debiancve1 veracode1 cve1 nvd1 osv8 openvas19 nessus25 mageia1 debian2 fedora4 ubuntu3 suse1 gentoo1 archlinux1 cloudfoundry1 almalinux1 redhat2 rocky1 oraclelinux1 amazon1 oracle3