Ubuntu.comUB:CVE-2018-20845CVE-2018-20845
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.004 Low
EPSS
Percentile
74.3%
Division-by-zero vulnerabilities in the functions pi_next_pcrl,
pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0
allow remote attackers to cause a denial of service (application crash).
Notes
| Author | Note |
|---|---|
| ebarretto | Marking emscripten ignored as openjpeg2 code is only for test/example. |
| mdeslaur | Ubuntu openjpeg2 packages are built with BUILD_MJ2:BOOL=OFF, so the vulnerable code is not compiled |
| ccdm94 | the openjpeg package does not include the file patched by commit c5bd64ea146. Before the refactoring, there was a single pi.c file, which according to the code itself, seems to be affected by this vulnerability, however, it looks like the vulnerability in this case is related to CVE-2018-14423 instead, which has a very similar patch (bd88611ed9a). |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | blender | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | blender | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | blender | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | blender | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | blender | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | blender | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | insighttoolkit4 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | insighttoolkit4 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | insighttoolkit4 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | insighttoolkit4 | < any | UNKNOWN |
References
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.004 Low
EPSS
Percentile
74.3%