vulnerability

Oracle Linux: CVE-2020-27814: ELSA-2021-4251: openjpeg2 security update (MODERATE) (Multiple Advisories)

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Nov 23, 2020
Added
Nov 17, 2021
Modified
Jan 7, 2025

Description

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.

Solution(s)

oracle-linux-upgrade-openjpeg2oracle-linux-upgrade-openjpeg2-develoracle-linux-upgrade-openjpeg2-devel-docsoracle-linux-upgrade-openjpeg2-tools
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.