Lucene search

K

RedhatCVELIST:CVE-2020-27823

HistoryMay 13, 2021 - 2:03 p.m.

CVE-2020-27823

2021-05-1314:03:50

CWE-20

redhat

www.cve.org

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CNA Affected

[
  {
    "product": "openjpeg",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "openjpeg 2.4.0"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1905762

lists.debian.org/debian-lts-announce/2021/02/msg00011.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/

www.debian.org/security/2021/dsa-4882

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

Related for CVELIST:CVE-2020-27823

ubuntucve1 veracode1 redhatcve1 prion1 debiancve1 nvd1 cve1 alpinelinux1 osv8 fedora4 openvas25 nessus27 mageia1 ubuntu3 debian2 suse2 cloudfoundry1 redhat2 almalinux1 oraclelinux1 rocky1 amazon1