Lucene search

K

RedhatCVELIST:CVE-2020-27845

HistoryJan 05, 2021 - 5:44 p.m.

CVE-2020-27845

2021-01-0517:44:30

CWE-125

redhat

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.1%

There’s a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg’s conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.

CNA Affected

[
  {
    "product": "openjpeg",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "openjpeg 2.4.0"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1907523

lists.debian.org/debian-lts-announce/2021/02/msg00011.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/

security.gentoo.org/glsa/202101-29

www.debian.org/security/2021/dsa-4882

www.oracle.com//security-alerts/cpujul2021.html

www.oracle.com/security-alerts/cpuApr2021.html

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.1%

Related for CVELIST:CVE-2020-27845

redhatcve1 veracode1 prion1 osv9 nvd1 ubuntucve1 cve1 debiancve1 openvas21 nessus27 fedora4 mageia1 ubuntu4 debian2 suse1 gentoo1 cloudfoundry1 archlinux1 oraclelinux1 rocky1 amazon1 almalinux1 redhat2 oracle3