USN-7037-1: OpenJPEG vulnerability
Published Sep 26, 2024
·Updated
It was discovered that OpenJPEG could enter a large loop and continuously print warning messages when given specially crafted input. An attacker could potentially use this issue to cause a denial of service.
Affected Software
28 affected componentsFixes available
All of the following
ubuntu/libopenjp2-7<2.5.0-2ubuntu0.1
2.5.0-2ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libopenjpip7<2.5.0-2ubuntu0.1
2.5.0-2ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libopenjp2-7<2.4.0-6ubuntu0.1
2.4.0-6ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libopenjp3d7<2.4.0-6ubuntu0.1
2.4.0-6ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libopenjpip7<2.4.0-6ubuntu0.1
2.4.0-6ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libopenjp2-7<2.3.1-1ubuntu4.20.04.2
2.3.1-1ubuntu4.20.04.2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libopenjp3d7<2.3.1-1ubuntu4.20.04.2
2.3.1-1ubuntu4.20.04.2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libopenjpip7<2.3.1-1ubuntu4.20.04.2
2.3.1-1ubuntu4.20.04.2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libopenjp2-7<2.3.0-2+deb10u2ubuntu0.1~esm2
2.3.0-2+deb10u2ubuntu0.1~esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libopenjp3d7<2.3.0-2+deb10u2ubuntu0.1~esm2
2.3.0-2+deb10u2ubuntu0.1~esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libopenjpip7<2.3.0-2+deb10u2ubuntu0.1~esm2
2.3.0-2+deb10u2ubuntu0.1~esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libopenjp2-7<2.1.2-1.1+deb9u6ubuntu0.1~esm4
2.1.2-1.1+deb9u6ubuntu0.1~esm4
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libopenjp3d7<2.1.2-1.1+deb9u6ubuntu0.1~esm4
2.1.2-1.1+deb9u6ubuntu0.1~esm4
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libopenjpip7<2.1.2-1.1+deb9u6ubuntu0.1~esm4
2.1.2-1.1+deb9u6ubuntu0.1~esm4
Ubuntu Ubuntu=16.04
Event History
Sep 26, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7037-1?
The severity of USN-7037-1 is classified as a denial of service vulnerability.
2
How do I fix USN-7037-1?
To fix USN-7037-1, upgrade to the specific patched versions provided in the advisory.
3
What products are affected by USN-7037-1?
The affected products include several versions of the OpenJPEG library across different Ubuntu releases.
4
Can USN-7037-1 be exploited remotely?
Yes, USN-7037-1 can be exploited remotely by sending specially crafted input.
5
What is the impact of USN-7037-1?
The impact of USN-7037-1 can lead to a denial of service, causing the application to enter a loop and continuously print warning messages.