Low: Red Hat Enhancement Advisory: openjpeg2 bug fix and enhancement update

An update for openjpeg2 is now available for Red Hat Enterprise Linux 7. OpenJPEG is an open-source JPEG 2000 library. For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section. Users of openjpeg2 are advised to...

The vulnerability of the opj_t1_encode_cblks function in the OpenJPEG image encoding and decoding library for Oracle Solaris allows a attacker to cause a service failure.

The vulnerability of the opjt1encodecblks function in the OpenJPEG image encoding and decoding library for Oracle Solaris is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

Buffer Overflow

OpenJPEG is vulnerable to buffer overflow. This is due to a wrong offset value in opjtcdcodeblockencallocatedata in lib/openjp2/tcd.c. This may lead to denial of service or possibly remote code execution...

Denial Of Service (DoS)

libopenjpeg.so is vulnerable to denial of service DoS. The functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c cause Division-by-zero error, leading to an application crash...

OpenJPEG openjp2/pi.c File Integer Overflow Vulnerability

OpenJPEG is a C-based open source JPEG2000 codec . An integer overflow vulnerability exists in the 'opjgetencodingparameters' function in the openjp2/pi.c file in OpenJPEG through 2.3.0 and earlier versions. The vulnerability stems from a network system or product that does not properly validate...

OpenJPEG Resource Management Error Vulnerability

OpenJPEG is a C-based open source JPEG2000 codec . A security vulnerability exists in the 'opjt1encodecblks' function in the openjp2/t1.c file in OpenJPEG version 2.3.1. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted bmp file...

OpenJPEG Out-of-Bounds Access Vulnerability

OpenJPEG is an open source JPEG 2000 codec written in C language. An out-of-bounds access vulnerability exists in the pinextlrcp, pinextrlcp, pinextrpcl, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl functions in OpenMJ2/pi.c in OpenJPEG 2.3.0 and earlier versions. A remote attacker could...

OpenJPEG De-Zero Vulnerability

OpenJPEG is a C-based open source JPEG2000 codec . OpenJPEG 2.3.0 and earlier versions of the openmj2/pi.c file have a divide-by-zero error vulnerability in the 'pinextpcrl' function, the 'pinextcprl' function, and the ' pinextrpcl' functions have a divide-by-zero error vulnerability. A remote...

CVE-2018-20846

Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

ALPINE-CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

DEBIAN-CVE-2018-20847

An improper computation of ptx0, ptx1, pty0 and pty1 in the function opjgetencodingparameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow...

CVE-2018-20847

An improper computation of ptx0, ptx1, pty0 and pty1 in the function opjgetencodingparameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow...

CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

CVE-2018-20846

Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

DEBIAN-CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

CVE-2018-20847

An improper computation of ptx0, ptx1, pty0 and pty1 in the function opjgetencodingparameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow...

DEBIAN-CVE-2018-20846

Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

DEBIAN-CVE-2018-20845

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-20845

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...