DeutschShown in its original language — a full translation is planned for a future version.
OpenJPEG: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten
view advisory published 2020-12-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenJPEG ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-27823US | high7.8 | — | ||
A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vul… | ||||
| CVE-2020-27824US | medium5.5 | Exploit | ||
A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause… | ||||
| CVE-2020-27814US | high7.8 | — | ||
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbit… | ||||
| CVE-2020-27845US | medium5.5 | — | ||
There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, th… | ||||
| CVE-2020-27844US | high7.8 | — | ||
A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, ca… | ||||
| CVE-2020-27843US | medium5.5 | — | ||
A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out… | ||||
| CVE-2020-27842US | medium5.5 | — | ||
There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer derefere… | ||||
| CVE-2020-27841US | medium5.5 | — | ||
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could… | ||||
| CVE-2020-15389US | medium6.5 | — | ||
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompresso… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:4251 vom 2021-11-09external
- Amazon Linux Security Advisory ALAS-2022-1741 vom 2022-01-27external
- https://github.com/uclouvain/openjpeg/blob/v2.4.0/CHANGELOG.md vom 2020-12-29external
- Debian Security Advisory DLA-2550 vom 2021-02-08external
- Debian Security Advisory DLA-2975 vom 2022-04-10external
- SUSE Security Update SUSE-SU-2022:1129-1 vom 2022-04-07external
- SUSE Security Update SUSE-SU-2022:1252-1 vom 2022-04-19external
- SUSE Security Update SUSE-SU-2022:1296-1 vom 2022-04-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan