7.8

CVE-2020-27814

Exploit
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Uclouvain ≫ Openjpeg Version <= 1.5.1
Uclouvain ≫ Openjpeg Version >= 2.0.0 < 2.4.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.01% 0.784
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

https://www.oracle.com//security-alerts/cpujul2021.html
Third Party Advisory
https://security.gentoo.org/glsa/202101-29
Third Party Advisory
https://www.debian.org/security/2021/dsa-4882
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html
Third Party Advisory
Mailing List
https://bugzilla.redhat.com/show_bug.cgi?id=1901998
Patch
Third Party Advisory
Issue Tracking
https://github.com/uclouvain/openjpeg/issues/1283
Third Party Advisory
Exploit
Issue Tracking