CVE-2023-39327

MEDIUM4.3Denial of service

Description

A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected products

uclouvain / openjpeg
uclouvain / openjpeg2.0 – 2.0
uclouvain / openjpeg2.5.0 – 2.5.0

References

VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:4128
VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2023-39327
MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2295812
MISChttps://github.com/uclouvain/openjpeg/issues/1472

Updated 18m ago · 8 sources