Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Jan 2, 2019 | Jul 19, 2018 |
| Debian | — | Upgrade openjpeg2 | Feb 20, 2019 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openjpeg-libs | Apr 30, 2021 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Jan 3, 2020 | Jul 19, 2018 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.11.0.1.2.0 on Solaris 11.4 | Jul 17, 2019 | Jul 19, 2018 |
| Suse | — | Upgrade libopenjp2-7Upgrade libopenjpeg1-32bitUpgrade libopenjp2-7-32bitUpgrade libopenjpeg1Upgrade openjpegUpgrade openjpeg2Upgrade openjpeg2-develUpgrade openjpeg-devel-32bitUpgrade openjpeg-devel | Aug 9, 2024 | Jul 19, 2018 |
| Ubuntu | — | Upgrade libopenjp3d7Upgrade libopenjpip7Upgrade libopenjp2-7 | Aug 22, 2019 | Jul 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub