Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 8: 2022-0129 Critical: openjpeg2 Denial Of Service Issue

mageia
Calendar Grey April 2, 2022
Dist Mageia Esm H88
The recent patches for openjpeg2 in Mageia addressed a significant denial of service vulnerability on April 2, 2022, impacting several versions.
A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files

Summary

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service. (CVE-2022-1122)

References

- https://bugs.mageia.org/show_bug.cgi?id=30229

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2NJDRJXCWHDJSXVXOZ6D4UKSSNPNLDOE/

- https://www.cve.org/CVERecord?id=CVE-2022-1122

Topics%20covered

Topics Covered

security advisory denial of service critical software update segmentation fault Mageia openjpeg2

Resolution

SRPMS

- 8/core/openjpeg2-2.4.0-1.3.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 02 Apr 2022
URL: https://advisories.mageia.org/MGASA-2022-0129.html
Type: security
CVE: CVE-2022-1122

Topics%20covered

Topics Covered

security advisory denial of service critical software update segmentation fault Mageia openjpeg2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here