Red Hat Security Advisory: openjpeg2 security update

Fixed packages 11

Vulnerabilities 14

• Unscored —
  CVE-2018-20845

  Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJ…

  insighttoolkit4 qtwebengine-opensource-src openjpeg2 openjpeg2 Debian Ubuntu
  Jun 26, 2019
• Unscored —
  CVE-2018-20847

  An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in…

  insighttoolkit4 qtwebengine-opensource-src openjpeg2 openjpeg2 Debian Ubuntu
  Jun 26, 2019
• Unscored —
  CVE-2018-5727

  In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remot…

  ghostscript openjpeg2 openjpeg2 openjpeg Debian Ubuntu
  Jan 16, 2018
• Unscored —
  CVE-2018-5785

  In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder func…

  openjpeg2 openjpeg2 openjpeg Debian Ubuntu Alpine
  Jan 19, 2018
• Unscored —
  CVE-2019-12973

  In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers c…

  insighttoolkit4 qtwebengine-opensource-src openjpeg2 openjpeg2 Debian Ubuntu Alpine
  Jun 26, 2019
• Unscored —
  CVE-2020-15389

  jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid an…

  openjpeg2 openjpeg2 openjpeg2 openjpeg Debian Ubuntu Azure Linux Alpine
  Jun 29, 2020
• Unscored —
  CVE-2020-27814

  A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw…

  ghostscript openjpeg2 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Azure Linux Alpine
  Jan 25, 2021
• Unscored —
  CVE-2020-27823

  A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to Open…

  insighttoolkit4 openjpeg2 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Azure Linux Alpine
  May 13, 2021
• Unscored —
  CVE-2020-27824 Public exploit

  A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker …

  ghostscript insighttoolkit4 openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux Alpine
  May 13, 2021
• Unscored —
  CVE-2020-27842

  There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to…

  ghostscript insighttoolkit4 openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux
  Jan 5, 2021
• Unscored —
  CVE-2020-27843

  A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted inpu…

  ghostscript insighttoolkit4 openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux
  Jan 5, 2021
• Unscored —
  CVE-2020-27845

  There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrus…

  ghostscript insighttoolkit4 openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux
  Jan 5, 2021
• Unscored —
  CVE-2021-29338

  Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS)…

  insighttoolkit4 openjpeg2 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Azure Linux Alpine
  Apr 14, 2021
• Unscored —
  CVE-2021-3575

  A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2…

  insighttoolkit4 openjpeg2 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Azure Linux Alpine
  Mar 4, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1536552
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537758
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728505
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728509
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1732270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1852869
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1901998
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1905723
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1905762
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1907513
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1907516
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1907523
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1950101
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1957616
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4251.json
• report
  https://access.redhat.com/security/cve/CVE-2018-5727
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5727
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5727
• report
  https://access.redhat.com/security/cve/CVE-2018-5785
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5785
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5785
• report
  https://access.redhat.com/security/cve/CVE-2018-20845
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20845
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20845
• report
  https://access.redhat.com/security/cve/CVE-2018-20847
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20847
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20847
• report
  https://access.redhat.com/security/cve/CVE-2019-12973
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-12973
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-12973
• report
  https://access.redhat.com/security/cve/CVE-2020-15389
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15389
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15389
• report
  https://access.redhat.com/security/cve/CVE-2020-27814
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27814
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27814
• article
  https://github.com/uclouvain/openjpeg/issues/1283