Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-1122

Опубликовано: 29 мар. 2022
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:uclouvain:openjpeg:2.4.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00048
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-665
CWE-665

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 3 лет назад

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

CVSS3: 5.1
redhat
почти 4 года назад

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

CVSS3: 5.5
debian
около 3 лет назад

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in ...

rocky
больше 2 лет назад

Low: openjpeg2 security update

rocky
больше 2 лет назад

Low: openjpeg2 security update

EPSS

Процентиль: 15%
0.00048
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-665
CWE-665