REDHAT-BUG-2067052: Low severity OpenJPEG OpenJPEG vulnerability

Published Mar 23, 2022

Updated

A flaw was found in OpenJPEG v2.4.0 in opj2decompress in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and DoS.

Reference: https://github.com/uclouvain/openjpeg/issues/1368

Upstream patch: https://github.com/uclouvain/openjpeg/commit/0afbdcf3e6d0d2bd2e16a0c4d513ee3cf86e460d

Affected Software

1 affected component

OpenJPEG OpenJPEG=2.4.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenJPEG to a version that resolves this vulnerability.
Patch 0afbdcf3e6d0d2bd2e16a0c4d513ee3cf86e460d

Event History

Mar 23, 2022

Data Sourced

via Red Hat·06:18 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to trigger the denial of service?

The affected opj2_decompress utility must process an input directory containing a large number of files, and allocation of the buffer used to store directory filenames must fail. The resulting free() call on an uninitialized pointer can cause a segmentation fault.

What is the practical impact of successful exploitation?

Successful triggering causes opj2_decompress to crash, resulting in a denial of service. The provided information does not indicate code execution or data disclosure.

Which deployments are most exposed?

Deployments that use opj2_decompress on directories whose contents can be influenced by untrusted users are most exposed, particularly where an attacker can supply or cause processing of a very large number of files. The issue description specifically concerns directory input rather than an individual image file.

REDHAT-BUG-2067052: Low severity OpenJPEG OpenJPEG vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What conditions are required to trigger the denial of service?

What is the practical impact of successful exploitation?

Which deployments are most exposed?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to trigger the denial of service?

What is the practical impact of successful exploitation?

Which deployments are most exposed?