CVE-2018-14423: Divide by Zero
Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openjpeg2to a version that resolves this vulnerability.Fixed in 2.3.0-2Fixed in 2.1.2-1.1+deb9u3 - Upgrade
Upgrade
debian/openjpeg2to a version that resolves this vulnerability.Fixed in 2.4.0-3Fixed in 2.4.0-3+deb11u3Fixed in 2.5.0-2+deb12u3Fixed in 2.5.3-2.1~deb13u2Fixed in 2.5.4-1.1
Event History
Frequently Asked Questions
What is CVE-2018-14423?
CVE-2018-14423 is a division-by-zero vulnerability in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in OpenJPEG through 2.3.0.
How does CVE-2018-14423 impact the affected software?
CVE-2018-14423 can allow remote attackers to cause a denial of service (application crash) on the affected software.
What is the severity of CVE-2018-14423?
CVE-2018-14423 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2018-14423?
OpenJPEG versions up to and including 2.3.0 are affected by CVE-2018-14423.
How can I fix the CVE-2018-14423 vulnerability?
To fix the CVE-2018-14423 vulnerability, update to OpenJPEG version 2.3.1 or later.