USN-4109-1
Dashboard / Vulnerabilities / USN-4109-1
USN-4109-1
Summary: openjpeg2 vulnerabilities
Details: It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. (CVE-2017-17480) It was discovered that OpenJPEG incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-14423) It was discovered that OpenJPEG incorrectly handled certain PNM files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-18088) It was discovered that OpenJPEG incorrectly handled certain BMP files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-5785, CVE-2018-6616)
References: https://ubuntu.com/security/notices/USN-4109-1, https://ubuntu.com/security/CVE-2017-17480, https://ubuntu.com/security/CVE-2018-5785, https://ubuntu.com/security/CVE-2018-6616, https://ubuntu.com/security/CVE-2018-14423, https://ubuntu.com/security/CVE-2018-18088
Affected packages
Package
Name: openjpeg2
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=bionic
Affected ranges
Type: ECOSYSTEM
Events:
