Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Jan 2, 2019 | Jul 19, 2018 |
| Debian | — | Upgrade openjpeg2 | Feb 20, 2019 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openjpeg-libs | Apr 30, 2021 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Jan 3, 2020 | Jul 19, 2018 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.11.0.1.2.0 on Solaris 11.4 | Jul 17, 2019 | Jul 19, 2018 |
| Suse | — | Upgrade libopenjpeg1Upgrade libopenjp2-7-32bitUpgrade libopenjp2-7Upgrade libopenjpeg1-32bitUpgrade openjpeg2Upgrade openjpeg-devel-32bitUpgrade openjpeg2-develUpgrade openjpeg-develUpgrade openjpeg | Aug 9, 2024 | Jul 19, 2018 |
| Ubuntu | — | Upgrade libopenjp2-7Upgrade libopenjpip7Upgrade libopenjp3d7 | Aug 22, 2019 | Jul 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub