Veracode Vulnerability DatabaseVERACODE:28921Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
OpenJPEG is vulnerable to denial of service. A heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c due to lack of opj_j2k_update_image_dimensions validation allows an attacker to crash the application.
References
access.redhat.com/errata/RHSA-2020:0262
access.redhat.com/errata/RHSA-2020:0274
access.redhat.com/errata/RHSA-2020:0296
git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2020-6851
github.com/uclouvain/openjpeg/issues/1228
lists.debian.org/debian-lts-announce/2020/01/msg00025.html
lists.debian.org/debian-lts-announce/2020/07/msg00008.html
lists.fedoraproject.org/archives/list/[email protected]/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V/
lists.fedoraproject.org/archives/list/[email protected]/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3/
www.debian.org/security/2021/dsa-4882
www.oracle.com/security-alerts/cpujul2020.html
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P