Lucene search
+L

2383 matches found

osv_ubuntu
osv_ubuntu
•added 2021/01/05 6:15 p.m.•13 views

UBUNTU-CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

7.8CVSS6.9AI score0.01394EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2021/01/05 6:15 p.m.•12 views

UBUNTU-CVE-2020-27842

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability...

5.5CVSS6.6AI score0.0152EPSS
SaveExploits0References5
Prion
Prion
•added 2021/01/05 6:15 p.m.•37 views

Out-of-bounds

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

7.1CVSS6.4AI score0.01772EPSS
SaveExploits0References7Affected Software4
Prion
Prion
•added 2021/01/05 6:15 p.m.•47 views

Design/Logic Flaw

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

8.3CVSS7.7AI score0.01394EPSS
SaveExploits0References5Affected Software3
UbuntuCve
UbuntuCve
•added 2021/01/05 6:15 p.m.•33 views

CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

5.5CVSS6.7AI score0.0152EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/01/05 6:15 p.m.•41 views

CVE-2020-27841

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability...

5.5CVSS6.8AI score0.01454EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/01/05 6:15 p.m.•40 views

CVE-2020-27842

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability...

5.5CVSS6.7AI score0.0152EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2021/01/05 6:15 p.m.•11 views

UBUNTU-CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

5.5CVSS6.6AI score0.0152EPSS
SaveExploits0References6
Prion
Prion
•added 2021/01/05 6:15 p.m.•42 views

Null pointer dereference

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability...

4.3CVSS6.4AI score0.0152EPSS
SaveExploits0References7Affected Software11
osv_ubuntu
osv_ubuntu
•added 2021/01/05 6:15 p.m.•11 views

UBUNTU-CVE-2020-27841

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability...

5.5CVSS6.6AI score0.01454EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2021/01/05 5:44 p.m.•37 views

CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

5.5CVSS6.3AI score0.0152EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/01/05 5:44 p.m.•37 views

CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

6.3AI score0.0152EPSS
SaveExploits0References7
CVE
CVE
•added 2021/01/05 5:44 p.m.•249 views

CVE-2020-27845

CVE-2020-27845 : In OpenJPEG, the flaw in src/lib/openjp2/pi.c (pre-2.4.0) allows an attacker-provided, untrusted input to trigger an out-of-bounds read during conversion/encoding, with impact to availability. Affected: OpenJPEG versions before 2.4.0. Remediation: upgrade to 2.4.0 or newer (per m...

5.5CVSS6.6AI score0.0152EPSS
SaveExploits0References7Affected Software1
Mend
Mend
•added 2021/01/05 5:44 p.m.•4 views

CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

6.8CVSS0.0152EPSS
SaveExploits0References12
Debian CVE
Debian CVE
•added 2021/01/05 5:43 p.m.•49 views

CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

8.3CVSS8AI score0.01394EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/01/05 5:43 p.m.•41 views

CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

7.8AI score0.01394EPSS
SaveExploits0References5
Mend
Mend
•added 2021/01/05 5:43 p.m.•7 views

CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

8.5CVSS0.01394EPSS
SaveExploits0References8
CVE
CVE
•added 2021/01/05 5:43 p.m.•351 views

CVE-2020-27844

OpenJPEG vulnerability CVE-2020-27844 affects OpenJPEG before 2.4.0. A crafted input during conversion/encoding can cause an out-of-bounds write in lib/openjp2/t2.c (opj_t2_encode_packet), impacting confidentiality, integrity, and availability. Remediation: upgrade to OpenJPEG 2.4.0 or newer. Exp...

8.3CVSS7.7AI score0.01394EPSS
SaveExploits0References5Affected Software1
AlpineLinux
AlpineLinux
•added 2021/01/05 5:43 p.m.•92 views

CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

8.3CVSS7.9AI score0.01394EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/05 5:22 p.m.•44 views

CVE-2020-27843

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

7.1CVSS6.2AI score0.01772EPSS
SaveExploits0
Rows per page
Query Builder