Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-3037

Высокий

ALT-PU-2024-3037: package libopenjpeg2.0 update to version 2.5.1-alt1

Источник
errata.altlinux.org
Дата публикации
27.02.2024
Дата обновления
04.02.2026
Устраненные уязвимости
9

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades libopenjpeg2.0 to version 2.5.1-alt1.

Устраненные уязвимости9

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 4 лет назад

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

CVSS3: 7.5
redhat
больше 5 лет назад

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

CVSS3: 7.8
nvd
больше 4 лет назад

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

CVSS3: 7.8
debian
больше 4 лет назад

A heap-based buffer overflow was found in openjpeg in color.c:379:42 i ...

CVSS3: 7.8
github
больше 4 лет назад

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.