CVE-2020-27844
Fixed in a distro release EPSS 1%
A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Products: uclouvain openjpeg, debian_linux, oracle outside_in_technology
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | openjpeg | 2.4.0-r0 |
| Alpine 3.11 | openjpeg | 2.4.0-r0 |
| Alpine 3.12 | openjpeg | 2.4.0-r0 |
| Alpine 3.13 | openjpeg | 2.4.0-r0 |
| Alpine 3.14 | openjpeg | 2.4.0-r0 |
| Alpine 3.15 | openjpeg | 2.4.0-r0 |
| Alpine 3.16 | openjpeg | 2.4.0-r0 |
| Alpine 3.17 | openjpeg | 2.4.0-r0 |
| Alpine 3.18 | openjpeg | 2.4.0-r0 |
| Alpine 3.19 | openjpeg | 2.4.0-r0 |
| Alpine 3.20 | openjpeg | 2.4.0-r0 |
| Alpine 3.21 | openjpeg | 2.4.0-r0 |
| Alpine 3.22 | openjpeg | 2.4.0-r0 |
| Alpine 3.23 | openjpeg | 2.4.0-r0 |
| Alpine 3.24 | openjpeg | 2.4.0-r0 |
| Arch Linux | chromium | 89.0.4389.72-1 |
| Arch Linux | vivaldi | 3.7.2218.45-1 |
| SUSE Package Hub 15 SP2 | chromium | 89.0.4389.72-bp152.2.62.1 |
| Ubuntu 16.04 LTS | insighttoolkit4 | no fix |
| Ubuntu 18.04 LTS | insighttoolkit4 | no fix |
| Ubuntu 20.04 LTS | insighttoolkit4 | no fix |
| Ubuntu 22.04 LTS | insighttoolkit4 | no fix |
| openSUSE Leap 15.2 | chromium | 89.0.4389.72-lp152.2.77.1 |
| openSUSE Tumbleweed | chromium | 93.0.4577.82-1.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |