OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Nov 28, 2018 | Oct 9, 2018 |
| Debian | — | Upgrade openjpeg2 | Feb 19, 2019 | Oct 9, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Apr 26, 2022 | Oct 9, 2018 |
| Ubuntu | — | Upgrade openjpip-server (Ubuntu Pro)Upgrade libopenjp2-7Upgrade openjpip-viewer (Ubuntu Pro)Upgrade openjpip-dec-server (Ubuntu Pro)Upgrade libopenjp3d7Upgrade libopenjpip7Upgrade openjpip-viewer-xerces (Ubuntu Pro)Upgrade openjpeg-tools (Ubuntu Pro) | Aug 22, 2019 | Oct 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub