Lucene search

K

RedhatCVELIST:CVE-2020-27842

HistoryJan 05, 2021 - 5:21 p.m.

CVE-2020-27842

2021-01-0517:21:40

CWE-125

redhat

www.cve.org

3

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.0%

There’s a flaw in openjpeg’s t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.

CNA Affected

[
  {
    "product": "openjpeg",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "openjpeg 2.4.0"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1907513

lists.debian.org/debian-lts-announce/2022/04/msg00006.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/

security.gentoo.org/glsa/202101-29

www.debian.org/security/2021/dsa-4882

www.oracle.com//security-alerts/cpujul2021.html

www.oracle.com/security-alerts/cpuApr2021.html

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.0%

Related for CVELIST:CVE-2020-27842

veracode1 openvas23 nessus29 nvd1 prion1 debiancve1 osv8 redhatcve1 cve1 ubuntucve1 mageia1 debian2 fedora4 suse1 ubuntu3 gentoo1 cloudfoundry1 archlinux1 ibm1 redhat2 almalinux1 rocky1 oraclelinux1 amazon1 oracle3