CVE-2018-20845
Summary
| CVE | CVE-2018-20845 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-06-26 18:15:00 UTC |
| Updated | 2023-02-27 16:48:00 UTC |
| Description | Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash). |
Risk And Classification
Problem Types: CWE-369
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| OpenJPEG Multiple Security Vulnerabilities | BID | www.securityfocus.com | |
| Fix multiple potential vulnerabilities and bugs by Young-X · Pull Request #1168 · uclouvain/openjpeg · GitHub | MISC | github.com | Patch, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159478 Oracle Enterprise Linux Security Update for openjpeg2 (ELSA-2021-4251)
- 239842 Red Hat Update for openjpeg2 (RHSA-2021:4251)
- 353122 Amazon Linux Security Advisory for openjpeg2 : ALAS2-2022-1741
- 671572 EulerOS Security Update for openjpeg2 (EulerOS-SA-2022-1577)
- 671668 EulerOS Security Update for openjpeg (EulerOS-SA-2022-1751)
- 751971 SUSE Enterprise Linux Security Update for openjpeg2 (SUSE-SU-2022:1129-1)
- 752044 SUSE Enterprise Linux Security Update for openjpeg2 (SUSE-SU-2022:1252-1)
- 940171 AlmaLinux Security Update for openjpeg2 (ALSA-2021:4251)
- 960346 Rocky Linux Security Update for openjpeg2 (RLSA-2021:4251)