Veracode Vulnerability DatabaseVERACODE:29232Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
openjpeg2 is vulnerable to denial of service. Excessive iterations in the opj_t1_encode_cblks function in openjp2/t1.c allows remote attackers to cause a denial of service via a malicious bmp file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openjpeg2 | eq | 2.3.0__8.el8 | |
| openjpeg2 | eq | 2.1.2__1.el7 | |
| openjpeg2 | eq | 2.3.0__6.el7 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
access.redhat.com/errata/RHBA-2019:3408
bugzilla.redhat.com/show_bug.cgi?id=1542321
github.com/uclouvain/openjpeg/issues/1059
lists.debian.org/debian-lts-announce/2018/12/msg00013.html
usn.ubuntu.com/4109-1/
www.debian.org/security/2019/dsa-4405
www.oracle.com/security-alerts/cpujul2020.html
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P