CVE-2020-6851
CVE-2020-6851
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
CVSS 7.5 · High · EPSS 5.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openjpeg2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
openjpeg2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
openjpeg2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
ghostscript Ubuntu:16.04:LTS
- Versions
- 9.16~dfsg~0-0ubuntu3
- 9.16~dfsg~0-0ubuntu4
- 9.18~dfsg~0-0ubuntu1
- 9.18~dfsg~0-0ubuntu2
- 9.18~dfsg~0-0ubuntu2.2
- 9.18~dfsg~0-0ubuntu2.3
- 9.18~dfsg~0-0ubuntu2.4
- 9.18~dfsg~0-0ubuntu2.6
- 9.18~dfsg~0-0ubuntu2.7
- 9.18~dfsg~0-0ubuntu2.8
- 9.18~dfsg~0-0ubuntu2.9
- 9.25~dfsg+1-0ubuntu0.16.04.1
- 9.25~dfsg+1-0ubuntu0.16.04.2
- 9.25~dfsg+1-0ubuntu0.16.04.3
- 9.26~dfsg+0-0ubuntu0.16.04.1
- 9.26~dfsg+0-0ubuntu0.16.04.3
- 9.26~dfsg+0-0ubuntu0.16.04.4
- 9.26~dfsg+0-0ubuntu0.16.04.5
- 9.26~dfsg+0-0ubuntu0.16.04.6
- 9.26~dfsg+0-0ubuntu0.16.04.7
- 9.26~dfsg+0-0ubuntu0.16.04.8
- 9.26~dfsg+0-0ubuntu0.16.04.9
- 9.26~dfsg+0-0ubuntu0.16.04.10
- 9.26~dfsg+0-0ubuntu0.16.04.11
- 9.26~dfsg+0-0ubuntu0.16.04.12
- 9.26~dfsg+0-0ubuntu0.16.04.13
- Affected ranges
- ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.16.04.14
Update to 9.26~dfsg+0-0ubuntu0.16.04.14
openjpeg2 Ubuntu:16.04:LTS
- Versions
- 2.1.0-2.1
- 2.1.0-2.1ubuntu0.1
- 2.1.2-1.1+deb9u2build0.1
- 2.1.2-1.1+deb9u3build0.16.04.1
- Affected ranges
- ECOSYSTEM: < 2.1.2-1.1+deb9u5build0.16.04.1
Update to 2.1.2-1.1+deb9u5build0.16.04.1
blender Ubuntu:16.04:LTS
- Versions
- 2.74+dfsg0-4build2
- 2.75.a+dfsg0-2ubuntu2
- 2.75.a+dfsg0-2ubuntu3
- 2.76.b+dfsg0-3
- 2.76.b+dfsg0-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:16.04:LTS
- Versions
- 4.8.1-1ubuntu3
- 4.8.1-1ubuntu4
- 4.8.2-3.1ubuntu1
- 4.9.0-3ubuntu2
- 4.9.0-4ubuntu1
- 4.9.0-4ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:16.04:LTS
- Versions
- 4.4.1-1
- 4.4.1-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ghostscript Ubuntu:18.04:LTS
- Versions
- 9.21~dfsg+1-0ubuntu3
- 9.22~dfsg+1-0ubuntu1
- 9.22~dfsg+1-0ubuntu1.1
- 9.22~dfsg+1-0ubuntu1.2
- 9.25~dfsg+1-0ubuntu0.18.04.1
- 9.25~dfsg+1-0ubuntu0.18.04.2
- 9.26~dfsg+0-0ubuntu0.18.04.1
- 9.26~dfsg+0-0ubuntu0.18.04.3
- 9.26~dfsg+0-0ubuntu0.18.04.4
- 9.26~dfsg+0-0ubuntu0.18.04.5
- 9.26~dfsg+0-0ubuntu0.18.04.6
- 9.26~dfsg+0-0ubuntu0.18.04.7
- 9.26~dfsg+0-0ubuntu0.18.04.8
- 9.26~dfsg+0-0ubuntu0.18.04.9
- 9.26~dfsg+0-0ubuntu0.18.04.10
- 9.26~dfsg+0-0ubuntu0.18.04.11
- 9.26~dfsg+0-0ubuntu0.18.04.12
- 9.26~dfsg+0-0ubuntu0.18.04.13
- Affected ranges
- ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.18.04.14
Update to 9.26~dfsg+0-0ubuntu0.18.04.14
openjpeg2 Ubuntu:18.04:LTS
- Versions
- 2.2.0-1
- 2.3.0-1
- 2.3.0-2build0.18.04.1
- Affected ranges
- ECOSYSTEM: < 2.3.0-2+deb10u2build0.18.04.1
Update to 2.3.0-2+deb10u2build0.18.04.1
blender Ubuntu:18.04:LTS
- Versions
- 2.78.c+dfsg0-2build1
- 2.79+dfsg0-2build1
- 2.79+dfsg0-3
- 2.79+dfsg0-3build1
- 2.79.b+dfsg0-1
- 2.79.b+dfsg0-1ubuntu1.18.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:18.04:LTS
- Versions
- 4.12.2-dfsg1-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-4
- 5.9.1+dfsg-4ubuntu1
- 5.9.2+dfsg-2ubuntu1
- 5.9.3+dfsg-0ubuntu1
- 5.9.4+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:18.04:LTS
- Versions
- 4.5-1
- 5.0.2-1
- 5.0.2-1build1
- 5.0.2-1build2
- 5.0.2-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjpeg2 Ubuntu:20.04:LTS
- Versions
- 2.3.0-2
- 2.3.0-2build1
- 2.3.1-1
- 2.3.1-1ubuntu3
- Affected ranges
- ECOSYSTEM: < 2.3.1-1ubuntu4
Update to 2.3.1-1ubuntu4
blender Ubuntu:20.04:LTS
- Versions
- 2.80+dfsg-3
- 2.80+dfsg-3build1
- 2.80+dfsg-4
- 2.81.a+dfsg-5build3
- 2.82+dfsg-1
- 2.82+dfsg-1build1
- 2.82.a+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:20.04:LTS
- Versions
- 4.12.2-dfsg1-4.1ubuntu1
- 4.13.2-dfsg1-1ubuntu1
- 4.13.2-dfsg1-4ubuntu1
- 4.13.2-dfsg1-6
- 4.13.2-dfsg1-6ubuntu1
- 4.13.2-dfsg1-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-1ubuntu1
- 5.12.4+dfsg-1ubuntu3
- 5.12.5+dfsg-3ubuntu1
- 5.12.5+dfsg-6ubuntu2
- 5.12.5+dfsg-7
- 5.12.5+dfsg-7build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu1.1
- 5.12.8+dfsg-0ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:20.04:LTS
- Versions
- 5.0.3-1build2
- 5.0.3-1build3
- 5.0.3-1build4
- 5.0.3-1build5
- 5.0.3-1ubuntu0.20.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
blender Ubuntu:22.04:LTS
- Versions
- 2.93.3+dfsg-3
- 2.93.5+dfsg-1
- 2.93.5+dfsg-1build1
- 3.0.1+dfsg-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:22.04:LTS
- Versions
- 4.13.3withdata-dfsg1-4.1
- 4.13.3withdata-dfsg2-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS
- Versions
- 5.15.6+dfsg-1
- 5.15.6+dfsg-2
- 5.15.7+dfsg-2
- 5.15.8+dfsg-1
- 5.15.8+dfsg-1build1
- 5.15.8+dfsg-1build2
- 5.15.8+dfsg-2
- 5.15.9+dfsg-1
- 5.15.9+dfsg-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:22.04:LTS
- Versions
- 5.0.3-1build8
- 5.0.3-1build9
- 5.0.3-1ubuntu0.22.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://lists.debian.org/debian-lts-announce/2020/01/msg00025.html
- https://access.redhat.com/errata/RHSA-2020:0262
- https://access.redhat.com/errata/RHSA-2020:0274
- https://access.redhat.com/errata/RHSA-2020:0296
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V/
- https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://github.com/uclouvain/openjpeg/issues/1228
- https://www.debian.org/security/2021/dsa-4882
- http://www.openwall.com/lists/oss-security/2026/09/22/6
- https://nvd.nist.gov/vuln/detail/CVE-2020-6851