The vulnerability of the opj_t1_encode_cblks function in the OpenJPEG image encoding and decoding library, related to a bug that leads to an infinite loop, allows attackers to cause service interruptions.

The vulnerability of the opjt1encodecblks function in the OpenJPEG image encoding and decoding library is related to an error that causes an infinite loop. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created BMP file...

CVE-2018-6616

In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

Slackware 14.2 / current : openjpeg (SSA:2019-095-01)

New openjpeg packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-095-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] openjpeg

New openjpeg packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openjpeg-2.3.1-i586-1slack14.2.txz: Upgraded. Includes many bug fixes including security fixes. Security fix Where to find the new...

PT-2019-5748 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.0 Description: The issue is related to an improper computation in the opj get encoding parameters function, which can lead to an integer overflow. This can potentially allow a remote attacker to access...

PT-2019-5742 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.1 Description: The issue is related to a heap buffer overflow in the color apply icc profile function, located in bin/common/color.c. This can be exploited by a remote attacker to access confidential data,...

PT-2019-10275 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.1 is not mentioned, however, OpenJPEG through 2.3.0 Description: The issue is related to out-of-bounds accesses in certain functions, specifically pi next lrcp, pi next rlcp, pi next rpcl, pi next pcrl, and pi...

PT-2019-10274 · Openjpeg +7 · Openjpeg +7

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, due to division-by-zero vulnerabilities in certain functions. Recommendations: For versions prior...

Updated openjpeg2 packages fix security vulnerability

Updated openjpeg2 packages fix security vulnerability: Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service CVE-2018-14423...

FreeBSD : OpenJPEG -- integer overflow (5efd7a93-2dfb-11e9-9549-e980e869c2e9)

NVD reports : In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. C Tenable Network Security, Inc. The descriptive text and package chec...

CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

OpenJPEG Denial of Service Vulnerability (CNVD-2019-31375)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in opjcalloc in the openjp2/opjmalloc.c file in OpenJPEG version 2.3.0. An attacker can exploit this vulnerability to cause a denial of service...

Design/Logic Flaw

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

UBUNTU-CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

DEBIAN-CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...