Lucene search

K

RedhatCVELIST:CVE-2020-27824

HistoryMay 13, 2021 - 1:56 p.m.

CVE-2020-27824

2021-05-1313:56:17

CWE-20

redhat

www.cve.org

1

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "product": "openjpeg",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "openjpeg 2.4.0"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1905723

lists.debian.org/debian-lts-announce/2021/02/msg00011.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/

www.debian.org/security/2021/dsa-4882

www.oracle.com/security-alerts/cpuoct2021.html

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

Related for CVELIST:CVE-2020-27824

redhatcve1 prion1 ubuntucve1 veracode1 osv10 alpinelinux1 cve1 debiancve1 nvd1 fedora4 openvas25 nessus30 mageia1 ubuntu5 debian2 suse1 cloudfoundry1 archlinux1 redhat2 almalinux1 rocky1 oraclelinux1 amazon1 oracle1