CVE-2020-27842
CVE-2020-27842
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.
CVSS 5.5 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
openjpeg
- Versions
- openjpeg 2.4.0: Affected
No fix published
openjpeg2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
openjpeg2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
openjpeg2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
openjpeg Ubuntu:14.04:LTS
- Versions
- 1.3+dfsg-4.6ubuntu2
- 1.3+dfsg-4.7ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ghostscript Ubuntu:16.04:LTS
- Versions
- 9.16~dfsg~0-0ubuntu3
- 9.16~dfsg~0-0ubuntu4
- 9.18~dfsg~0-0ubuntu1
- 9.18~dfsg~0-0ubuntu2
- 9.18~dfsg~0-0ubuntu2.2
- 9.18~dfsg~0-0ubuntu2.3
- 9.18~dfsg~0-0ubuntu2.4
- 9.18~dfsg~0-0ubuntu2.6
- 9.18~dfsg~0-0ubuntu2.7
- 9.18~dfsg~0-0ubuntu2.8
- 9.18~dfsg~0-0ubuntu2.9
- 9.25~dfsg+1-0ubuntu0.16.04.1
- 9.25~dfsg+1-0ubuntu0.16.04.2
- 9.25~dfsg+1-0ubuntu0.16.04.3
- 9.26~dfsg+0-0ubuntu0.16.04.1
- 9.26~dfsg+0-0ubuntu0.16.04.3
- 9.26~dfsg+0-0ubuntu0.16.04.4
- 9.26~dfsg+0-0ubuntu0.16.04.5
- 9.26~dfsg+0-0ubuntu0.16.04.6
- 9.26~dfsg+0-0ubuntu0.16.04.7
- 9.26~dfsg+0-0ubuntu0.16.04.8
- 9.26~dfsg+0-0ubuntu0.16.04.9
- 9.26~dfsg+0-0ubuntu0.16.04.10
- 9.26~dfsg+0-0ubuntu0.16.04.11
- 9.26~dfsg+0-0ubuntu0.16.04.12
- 9.26~dfsg+0-0ubuntu0.16.04.13
- Affected ranges
- ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.16.04.14
Update to 9.26~dfsg+0-0ubuntu0.16.04.14
openjpeg2 Ubuntu:Pro:16.04:LTS
- Versions
- 2.1.0-2.1
- 2.1.0-2.1ubuntu0.1
- 2.1.2-1.1+deb9u2build0.1
- 2.1.2-1.1+deb9u3build0.16.04.1
- 2.1.2-1.1+deb9u3ubuntu0.1~esm1
- 2.1.2-1.1+deb9u5build0.16.04.1
- 2.1.2-1.1+deb9u5ubuntu0.1~esm1
- 2.1.2-1.1+deb9u6build0.16.04.1
- 2.1.2-1.1+deb9u6ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: < 2.1.2-1.1+deb9u6ubuntu0.1~esm3
Update to 2.1.2-1.1+deb9u6ubuntu0.1~esm3
blender Ubuntu:16.04:LTS
- Versions
- 2.74+dfsg0-4build2
- 2.75.a+dfsg0-2ubuntu2
- 2.75.a+dfsg0-2ubuntu3
- 2.76.b+dfsg0-3
- 2.76.b+dfsg0-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:16.04:LTS
- Versions
- 4.8.1-1ubuntu3
- 4.8.1-1ubuntu4
- 4.8.2-3.1ubuntu1
- 4.9.0-3ubuntu2
- 4.9.0-4ubuntu1
- 4.9.0-4ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjpeg Ubuntu:Pro:16.04:LTS
- Versions
- 1:1.5.2-3.1
- 1:1.5.2-3.1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:16.04:LTS
- Versions
- 4.4.1-1
- 4.4.1-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ghostscript Ubuntu:18.04:LTS
- Versions
- 9.21~dfsg+1-0ubuntu3
- 9.22~dfsg+1-0ubuntu1
- 9.22~dfsg+1-0ubuntu1.1
- 9.22~dfsg+1-0ubuntu1.2
- 9.25~dfsg+1-0ubuntu0.18.04.1
- 9.25~dfsg+1-0ubuntu0.18.04.2
- 9.26~dfsg+0-0ubuntu0.18.04.1
- 9.26~dfsg+0-0ubuntu0.18.04.3
- 9.26~dfsg+0-0ubuntu0.18.04.4
- 9.26~dfsg+0-0ubuntu0.18.04.5
- 9.26~dfsg+0-0ubuntu0.18.04.6
- 9.26~dfsg+0-0ubuntu0.18.04.7
- 9.26~dfsg+0-0ubuntu0.18.04.8
- 9.26~dfsg+0-0ubuntu0.18.04.9
- 9.26~dfsg+0-0ubuntu0.18.04.10
- 9.26~dfsg+0-0ubuntu0.18.04.11
- 9.26~dfsg+0-0ubuntu0.18.04.12
- 9.26~dfsg+0-0ubuntu0.18.04.13
- Affected ranges
- ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.18.04.14
Update to 9.26~dfsg+0-0ubuntu0.18.04.14
openjpeg2 Ubuntu:18.04:LTS
- Versions
- 2.2.0-1
- 2.3.0-1
- 2.3.0-2build0.18.04.1
- Affected ranges
- ECOSYSTEM: < 2.3.0-2+deb10u2build0.18.04.1
Update to 2.3.0-2+deb10u2build0.18.04.1
blender Ubuntu:18.04:LTS
- Versions
- 2.78.c+dfsg0-2build1
- 2.79+dfsg0-2build1
- 2.79+dfsg0-3
- 2.79+dfsg0-3build1
- 2.79.b+dfsg0-1
- 2.79.b+dfsg0-1ubuntu1.18.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:18.04:LTS
- Versions
- 4.12.2-dfsg1-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-4
- 5.9.1+dfsg-4ubuntu1
- 5.9.2+dfsg-2ubuntu1
- 5.9.3+dfsg-0ubuntu1
- 5.9.4+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:18.04:LTS
- Versions
- 4.5-1
- 5.0.2-1
- 5.0.2-1build1
- 5.0.2-1build2
- 5.0.2-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjpeg2 Ubuntu:20.04:LTS
- Versions
- 2.3.0-2
- 2.3.0-2build1
- 2.3.1-1
- 2.3.1-1ubuntu3
- 2.3.1-1ubuntu4
- Affected ranges
- ECOSYSTEM: < 2.3.1-1ubuntu4.20.04.1
Update to 2.3.1-1ubuntu4.20.04.1
blender Ubuntu:20.04:LTS
- Versions
- 2.80+dfsg-3
- 2.80+dfsg-3build1
- 2.80+dfsg-4
- 2.81.a+dfsg-5build3
- 2.82+dfsg-1
- 2.82+dfsg-1build1
- 2.82.a+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:20.04:LTS
- Versions
- 4.12.2-dfsg1-4.1ubuntu1
- 4.13.2-dfsg1-1ubuntu1
- 4.13.2-dfsg1-4ubuntu1
- 4.13.2-dfsg1-6
- 4.13.2-dfsg1-6ubuntu1
- 4.13.2-dfsg1-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-1ubuntu1
- 5.12.4+dfsg-1ubuntu3
- 5.12.5+dfsg-3ubuntu1
- 5.12.5+dfsg-6ubuntu2
- 5.12.5+dfsg-7
- 5.12.5+dfsg-7build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu1.1
- 5.12.8+dfsg-0ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:20.04:LTS
- Versions
- 5.0.3-1build2
- 5.0.3-1build3
- 5.0.3-1build4
- 5.0.3-1build5
- 5.0.3-1ubuntu0.20.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
blender Ubuntu:22.04:LTS
- Versions
- 2.93.3+dfsg-3
- 2.93.5+dfsg-1
- 2.93.5+dfsg-1build1
- 3.0.1+dfsg-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:22.04:LTS
- Versions
- 4.13.3withdata-dfsg1-4.1
- 4.13.3withdata-dfsg2-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://bugzilla.redhat.com/show_bug.cgi?id=1907513
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/
- https://security.gentoo.org/glsa/202101-29
- https://www.debian.org/security/2021/dsa-4882
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-27842