REDHAT-BUG-2219236: Medium severity openjpeg vulnerability

Published Jul 3, 2023

Updated

A vulnerability was found in OpenJPEG where an attacker remotely sends malicious pictures to allow the program to run, which can cause denial of service and exhaust system resources.

References:

https://github.com/uclouvain/openjpeg/issues/1471 https://github.com/uclouvain/openjpeg/pull/1470

Affected Software

1 affected component

uclouvain openjpeg

Event History

Jul 3, 2023

Data Sourced

via Red Hat·05:43 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2219236?

The severity of REDHAT-BUG-2219236 is considered high due to the potential for denial of service and resource exhaustion.

How do I fix REDHAT-BUG-2219236?

To fix REDHAT-BUG-2219236, ensure you update to the latest version of OpenJPEG that addresses this vulnerability.

What types of attacks are mitigated by addressing REDHAT-BUG-2219236?

Addressing REDHAT-BUG-2219236 mitigates remote code execution and denial of service attacks stemming from malicious image files.

Who is affected by REDHAT-BUG-2219236?

Users and systems running vulnerable versions of UCLouvain OpenJPEG are at risk from REDHAT-BUG-2219236.

Can REDHAT-BUG-2219236 be exploited remotely?

Yes, REDHAT-BUG-2219236 can be exploited remotely by sending malicious images to the OpenJPEG program.