Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Jan 2, 2019 | Jul 19, 2018 |
| Debian | — | Upgrade openjpeg2 | Feb 20, 2019 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openjpeg-libs | Apr 30, 2021 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Jan 3, 2020 | Jul 19, 2018 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.11.0.1.2.0 on Solaris 11.4 | Jul 17, 2019 | Jul 19, 2018 |
| Suse | — | Upgrade libopenjp2-7-32bitUpgrade libopenjp2-7Upgrade libopenjpeg1-32bitUpgrade libopenjpeg1Upgrade openjpeg-devel-32bitUpgrade openjpeg2Upgrade openjpegUpgrade openjpeg2-develUpgrade openjpeg-devel | Aug 9, 2024 | Jul 19, 2018 |
| Ubuntu | — | Upgrade libopenjp2-7Upgrade libopenjp3d7Upgrade libopenjpip7 | Aug 22, 2019 | Jul 19, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub