Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 2020-0487 High Severity: OpenJPEG Buffer Overflow Vulnerability

mageia
Calendar Grey December 6, 2019
Dist Mageia Esm H88
The recent Mageia security patch for OpenJPEG mitigates a potential remote denial of service vulnerability that could be triggered by specially crafted TGA files.
The updated packages fix a security vulnerability: In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c

Summary

The updated packages fix a security vulnerability:
In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616. (CVE-2019-12973)

References

- https://bugs.mageia.org/show_bug.cgi?id=25769

- - https://www.cve.org/CVERecord?id=CVE-2019-12973

Topics%20covered

Topics Covered

security advisory denial of service remote exploit critical OpenJPEG Mageia

Resolution

SRPMS

- 7/core/openjpeg2-2.3.1-1.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0365.html
Type: security
CVE: CVE-2019-12973

Topics%20covered

Topics Covered

security advisory denial of service remote exploit critical OpenJPEG Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here