CVE-2021-29338
Summary
| CVE | CVE-2021-29338 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-04-14 14:15:00 UTC |
|---|
| Updated | 2023-11-07 03:32:00 UTC |
|---|
| Description | Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 33 Update: openjpeg2-2.3.1-11.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 33 Update: openjpeg2-2.3.1-11.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| OpenJPEG: Multiple Vulnerabilities (GLSA 202209-04) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Integer Overflow in num_images · Issue #1338 · uclouvain/openjpeg · GitHub |
MISC |
github.com |
|
| [SECURITY] [DLA 2975-1] openjpeg2 security update |
MLIST |
lists.debian.org |
|
| [SECURITY] Fedora 34 Update: mingw-openjpeg2-2.4.0-3.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: mingw-openjpeg2-2.4.0-3.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159478 Oracle Enterprise Linux Security Update for openjpeg2 (ELSA-2021-4251)
- 179181 Debian Security Update for openjpeg2 (DLA 2975-1)
- 184664 Debian Security Update for openjpeg2 (CVE-2021-29338)
- 20317 Oracle Database 21c Critical Patch Update - January 2023
- 20318 Oracle Database 19c Critical Patch Update - January 2023
- 20319 Oracle Database 19c Critical OJVM Patch Update - January 2023
- 239842 Red Hat Update for openjpeg2 (RHSA-2021:4251)
- 281630 Fedora Security Update for mingw (FEDORA-2021-e145f477df)
- 281631 Fedora Security Update for mingw (FEDORA-2021-c1ac2ee5ee)
- 296059 Oracle Solaris 11.4 Support Repository Update (SRU) 36.0.1.101.2 Missing (CPUJUL2021)
- 353122 Amazon Linux Security Advisory for openjpeg2 : ALAS2-2022-1741
- 354320 Amazon Linux Security Advisory for openjpeg2 : ALAS2022-2022-184
- 354458 Amazon Linux Security Advisory for openjpeg2 : ALAS2022-2022-122
- 355194 Amazon Linux Security Advisory for openjpeg2 : ALAS2023-2023-040
- 500475 Alpine Linux Security Update for openjpeg
- 504232 Alpine Linux Security Update for openjpeg
- 671207 EulerOS Security Update for openjpeg2 (EulerOS-SA-2022-1032)
- 671220 EulerOS Security Update for openjpeg2 (EulerOS-SA-2022-1012)
- 671298 EulerOS Security Update for openjpeg2 (EulerOS-SA-2022-1230)
- 671328 EulerOS Security Update for openjpeg2 (EulerOS-SA-2022-1211)
- 710617 Gentoo Linux OpenJPEG Multiple Vulnerabilities (GLSA 202209-04)
- 751971 SUSE Enterprise Linux Security Update for openjpeg2 (SUSE-SU-2022:1129-1)
- 752044 SUSE Enterprise Linux Security Update for openjpeg2 (SUSE-SU-2022:1252-1)
- 752060 SUSE Enterprise Linux Security Update for openjpeg (SUSE-SU-2022:1296-1)
- 940171 AlmaLinux Security Update for openjpeg2 (ALSA-2021:4251)
- 960346 Rocky Linux Security Update for openjpeg2 (RLSA-2021:4251)
