Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0478
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0478)
Zusammenfassung:	The remote host is missing an update for the 'openjpeg2' package(s) announced via the MGASA-2020-0478 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openjpeg2' package(s) announced via the MGASA-2020-0478 advisory. Vulnerability Insight: There's a flaw in openjpeg in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability (CVE-2020-27841). There's a flaw in openjpeg's t2 encoder. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability (CVE-2020-27842). A flaw was found in OpenJPEG. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability (CVE-2020-27843). There's a flaw in src/lib/openjp2/pi.c of openjpeg. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability (CVE-2020-27845). Affected Software/OS: 'openjpeg2' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-27841 Debian Security Information: DSA-4882 (Google Search) https://www.debian.org/security/2021/dsa-4882 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/ https://security.gentoo.org/glsa/202101-29 https://bugzilla.redhat.com/show_bug.cgi?id=1907510 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html Common Vulnerability Exposure (CVE) ID: CVE-2020-27842 https://bugzilla.redhat.com/show_bug.cgi?id=1907513 https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2020-27843 https://bugzilla.redhat.com/show_bug.cgi?id=1907516 Common Vulnerability Exposure (CVE) ID: CVE-2020-27845 https://bugzilla.redhat.com/show_bug.cgi?id=1907523
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.