EulerOS Virtualization for ARM 64 3.0.5.0 : openjpeg2 (EulerOS-SA-2020-1049)

According to the versions of the openjpeg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444torgb function in color.c,...

EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2020-1020)

According to the version of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow...

EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2019-2111)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

Low: Red Hat Bug Fix Advisory: openjpeg2 bug fix and enhancement update

An update for openjpeg2 is now available for Red Hat Enterprise Linux 8. For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section...

Debian: Security Advisory (DLA-1950-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1950-1 : openjpeg2 security update

A heap buffer overflow vulnerability was discovered in openjpeg2, the open-source JPEG 2000 codec. This vulnerability is caused by insufficient validation of width and height of image components in colorapplyiccprofile src/bin/common/color.c. Remote attackers might leverage this vulnerability via...

[SECURITY] [DLA 1950-1] openjpeg2 security update

Package : openjpeg2 Version : 2.1.0-2+deb8u8 CVE ID : CVE-2018-21010 Debian Bug : 939553 A heap buffer overflow vulnerability was discovered in openjpeg2, the open-source JPEG 2000 codec. This vulnerability is caused by insufficient validation of width and height of image components in...

Ubuntu: Security Advisory (USN-4109-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4109-1: OpenJPEG vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. CVE-2017-17480 It was discovered that OpenJPEG incorrectly handled certain files. An attacker could possibly use this...

SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2019:2152-1)

This update for openjpeg2 fixes the following issues : Security issue fixed : CVE-2016-1923: Fixed anout of bounds read int opjj2kupdateimagedata and opjtgtreset bsc962522. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2019:2152-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: Security issue fixed: - CVE-2016-1923: Fixed anout of bounds read int opjj2kupdateimagedata and opjtgtreset bsc962522...

PT-2020-6191 · Openjpeg +9 · Openjpeg2 +9

Name of the Vulnerable Software and Affected Versions: openjpeg2 affected versions not specified Description: A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. This issue could allow an attacker to cause an application crash or, in some cases, execute arbitra...

EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2019-1775)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer,...

Debian: Security Advisory (DLA-1851-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1851-1 : openjpeg2 security update

Two security vulnerabilities were discovered in openjpeg2, a JPEG 2000 image library. CVE-2016-9112 A floating point exception or divide by zero in the function opjpinextcprl may lead to a denial of service. CVE-2018-20847 An improper computation of values in the function opjgetencodingparameters...

[SECURITY] [DLA 1851-1] openjpeg2 security update

Package : openjpeg2 Version : 2.1.0-2+deb8u7 CVE ID : CVE-2016-9112 CVE-2018-20847 Debian Bug : 931294 844551 Two security vulnerabilities were discovered in openjpeg2, a JPEG 2000 image library. CVE-2016-9112 A floating point exception or divide by zero in the function opjpinextcprl may lead to ...

AZL-45102 CVE-2017-12652 affecting package openjpeg2 2.3.1-12

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

DLA-1851-1 openjpeg2 - security update

Bulletin has no description...

Fedora Update for openjpeg2 FEDORA-2018-87c15da28c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for mingw-openjpeg2 FEDORA-2018-87c15da28c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...