Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-27814

Опубликовано: 26 янв. 2021
Источник: ubuntu
Приоритет: medium
CVSS2: 6.8
CVSS3: 7.8

Описание

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

esm-infra-legacy/trusty

DNE

focal

not-affected

groovy

not-affected

Показывать по

РелизСтатусПримечание
bionic

released

9.26~dfsg+0-0ubuntu0.18.04.14
devel

not-affected

uses system openjpeg2
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

9.26~dfsg+0-0ubuntu0.18.04.14
esm-infra/focal

not-affected

uses system openjpeg2
esm-infra/xenial

not-affected

9.26~dfsg+0-0ubuntu0.16.04.14
focal

not-affected

uses system openjpeg2
groovy

not-affected

uses system openjpeg2
hirsute

not-affected

uses system openjpeg2
impish

not-affected

uses system openjpeg2

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
devel

DNE

esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

DNE

focal

not-affected

code not present
groovy

not-affected

code not present
hirsute

not-affected

code not present

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

released

2.3.0-2+deb10u2build0.18.04.1
devel

released

2.3.1-1ubuntu5
esm-apps/bionic

released

2.3.0-2+deb10u2build0.18.04.1
esm-apps/xenial

released

2.1.2-1.1+deb9u6build0.16.04.1
esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

2.3.1-1ubuntu4.20.04.1
focal

released

2.3.1-1ubuntu4.20.04.1
groovy

released

2.3.1-1ubuntu4.20.10.1
hirsute

released

2.3.1-1ubuntu5
impish

released

2.3.1-1ubuntu5

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

needed

esm-apps/bionic

not-affected

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needed

esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needed
groovy

ignored

end of life
hirsute

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

esm-infra-legacy/trusty

DNE

focal

not-affected

groovy

not-affected

Показывать по

6.8 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
больше 4 лет назад

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.

CVSS3: 7.8
nvd
больше 4 лет назад

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.

CVSS3: 7.8
msrc
11 месяцев назад

Описание отсутствует

CVSS3: 7.8
debian
больше 4 лет назад

A heap-buffer overflow was found in the way openjpeg2 handled certain ...

CVSS3: 7.8
github
около 3 лет назад

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.

6.8 Medium

CVSS2

7.8 High

CVSS3

Уязвимость CVE-2020-27814