Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE Linux Enterprise: 2022:1252-1 Important: Openjpeg2 Buffer Overflow

suse
Calendar Grey April 19, 2022
Dist Suse Esm H88
SUSE Security Update tackles severe flaws in openjpeg2, providing essential patches for both developers and users.
An update that fixes 13 vulnerabilities is now available

Summary

This update for openjpeg2 fixes the following issues: - CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314). - CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967). - CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845). - CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016). - CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882). - CVE-2018-16376: Fixed heap-based buffer overflow function

Topics%20covered

Topics Covered

security advisory buffer overflow software update vulnerability important fix SUSE Linux Enterprise openjpeg2

References

#1076314 #1076967 #1079845 #1102016 #1106881

#1106882 #1140130 #1160782 #1162090 #1173578

#1180457 #1184774 #1197738

Cross- CVE-2018-14423 CVE-2018-16375 CVE-2018-16376

CVE-2018-20845 CVE-2018-5727 CVE-2018-5785

CVE-2018-6616 CVE-2020-15389 CVE-2020-27823

CVE-2020-6851 CVE-2020-8112 CVE-2021-29338

CVE-2022-1122

CVSS scores:

CVE-2018-14423 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2018-14423 (SUSE): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CVE-2018-16375 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2018-16375 (SUSE): 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CVE-2018-16376 (NVD) : 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:1252-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow software update vulnerability important fix SUSE Linux Enterprise openjpeg2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here