CVE-2020-8112
CVE-2020-8112
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS 8.8 · High · EPSS 3.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
openjpeg2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
openjpeg2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
openjpeg2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.4.0-1
Update to 2.4.0-1
ghostscript Ubuntu:16.04:LTS
- Versions
- 9.16~dfsg~0-0ubuntu3
- 9.16~dfsg~0-0ubuntu4
- 9.18~dfsg~0-0ubuntu1
- 9.18~dfsg~0-0ubuntu2
- 9.18~dfsg~0-0ubuntu2.2
- 9.18~dfsg~0-0ubuntu2.3
- 9.18~dfsg~0-0ubuntu2.4
- 9.18~dfsg~0-0ubuntu2.6
- 9.18~dfsg~0-0ubuntu2.7
- 9.18~dfsg~0-0ubuntu2.8
- 9.18~dfsg~0-0ubuntu2.9
- 9.25~dfsg+1-0ubuntu0.16.04.1
- 9.25~dfsg+1-0ubuntu0.16.04.2
- 9.25~dfsg+1-0ubuntu0.16.04.3
- 9.26~dfsg+0-0ubuntu0.16.04.1
- 9.26~dfsg+0-0ubuntu0.16.04.3
- 9.26~dfsg+0-0ubuntu0.16.04.4
- 9.26~dfsg+0-0ubuntu0.16.04.5
- 9.26~dfsg+0-0ubuntu0.16.04.6
- 9.26~dfsg+0-0ubuntu0.16.04.7
- 9.26~dfsg+0-0ubuntu0.16.04.8
- 9.26~dfsg+0-0ubuntu0.16.04.9
- 9.26~dfsg+0-0ubuntu0.16.04.10
- 9.26~dfsg+0-0ubuntu0.16.04.11
- 9.26~dfsg+0-0ubuntu0.16.04.12
- 9.26~dfsg+0-0ubuntu0.16.04.13
- Affected ranges
- ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.16.04.14
Update to 9.26~dfsg+0-0ubuntu0.16.04.14
openjpeg2 Ubuntu:16.04:LTS
- Versions
- 2.1.0-2.1
- 2.1.0-2.1ubuntu0.1
- 2.1.2-1.1+deb9u2build0.1
- 2.1.2-1.1+deb9u3build0.16.04.1
- Affected ranges
- ECOSYSTEM: < 2.1.2-1.1+deb9u5build0.16.04.1
Update to 2.1.2-1.1+deb9u5build0.16.04.1
blender Ubuntu:16.04:LTS
- Versions
- 2.74+dfsg0-4build2
- 2.75.a+dfsg0-2ubuntu2
- 2.75.a+dfsg0-2ubuntu3
- 2.76.b+dfsg0-3
- 2.76.b+dfsg0-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:16.04:LTS
- Versions
- 4.8.1-1ubuntu3
- 4.8.1-1ubuntu4
- 4.8.2-3.1ubuntu1
- 4.9.0-3ubuntu2
- 4.9.0-4ubuntu1
- 4.9.0-4ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:16.04:LTS
- Versions
- 4.4.1-1
- 4.4.1-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ghostscript Ubuntu:18.04:LTS
- Versions
- 9.21~dfsg+1-0ubuntu3
- 9.22~dfsg+1-0ubuntu1
- 9.22~dfsg+1-0ubuntu1.1
- 9.22~dfsg+1-0ubuntu1.2
- 9.25~dfsg+1-0ubuntu0.18.04.1
- 9.25~dfsg+1-0ubuntu0.18.04.2
- 9.26~dfsg+0-0ubuntu0.18.04.1
- 9.26~dfsg+0-0ubuntu0.18.04.3
- 9.26~dfsg+0-0ubuntu0.18.04.4
- 9.26~dfsg+0-0ubuntu0.18.04.5
- 9.26~dfsg+0-0ubuntu0.18.04.6
- 9.26~dfsg+0-0ubuntu0.18.04.7
- 9.26~dfsg+0-0ubuntu0.18.04.8
- 9.26~dfsg+0-0ubuntu0.18.04.9
- 9.26~dfsg+0-0ubuntu0.18.04.10
- 9.26~dfsg+0-0ubuntu0.18.04.11
- 9.26~dfsg+0-0ubuntu0.18.04.12
- 9.26~dfsg+0-0ubuntu0.18.04.13
- Affected ranges
- ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.18.04.14
Update to 9.26~dfsg+0-0ubuntu0.18.04.14
openjpeg2 Ubuntu:18.04:LTS
- Versions
- 2.2.0-1
- 2.3.0-1
- 2.3.0-2build0.18.04.1
- Affected ranges
- ECOSYSTEM: < 2.3.0-2+deb10u2build0.18.04.1
Update to 2.3.0-2+deb10u2build0.18.04.1
blender Ubuntu:18.04:LTS
- Versions
- 2.78.c+dfsg0-2build1
- 2.79+dfsg0-2build1
- 2.79+dfsg0-3
- 2.79+dfsg0-3build1
- 2.79.b+dfsg0-1
- 2.79.b+dfsg0-1ubuntu1.18.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:18.04:LTS
- Versions
- 4.12.2-dfsg1-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-4
- 5.9.1+dfsg-4ubuntu1
- 5.9.2+dfsg-2ubuntu1
- 5.9.3+dfsg-0ubuntu1
- 5.9.4+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:18.04:LTS
- Versions
- 4.5-1
- 5.0.2-1
- 5.0.2-1build1
- 5.0.2-1build2
- 5.0.2-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjpeg2 Ubuntu:20.04:LTS
- Versions
- 2.3.0-2
- 2.3.0-2build1
- 2.3.1-1
- 2.3.1-1ubuntu3
- Affected ranges
- ECOSYSTEM: < 2.3.1-1ubuntu4
Update to 2.3.1-1ubuntu4
blender Ubuntu:20.04:LTS
- Versions
- 2.80+dfsg-3
- 2.80+dfsg-3build1
- 2.80+dfsg-4
- 2.81.a+dfsg-5build3
- 2.82+dfsg-1
- 2.82+dfsg-1build1
- 2.82.a+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:20.04:LTS
- Versions
- 4.12.2-dfsg1-4.1ubuntu1
- 4.13.2-dfsg1-1ubuntu1
- 4.13.2-dfsg1-4ubuntu1
- 4.13.2-dfsg1-6
- 4.13.2-dfsg1-6ubuntu1
- 4.13.2-dfsg1-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-1ubuntu1
- 5.12.4+dfsg-1ubuntu3
- 5.12.5+dfsg-3ubuntu1
- 5.12.5+dfsg-6ubuntu2
- 5.12.5+dfsg-7
- 5.12.5+dfsg-7build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu1.1
- 5.12.8+dfsg-0ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:20.04:LTS
- Versions
- 5.0.3-1build2
- 5.0.3-1build3
- 5.0.3-1build4
- 5.0.3-1build5
- 5.0.3-1ubuntu0.20.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
blender Ubuntu:22.04:LTS
- Versions
- 2.93.3+dfsg-3
- 2.93.5+dfsg-1
- 2.93.5+dfsg-1build1
- 3.0.1+dfsg-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit4 Ubuntu:22.04:LTS
- Versions
- 4.13.3withdata-dfsg1-4.1
- 4.13.3withdata-dfsg2-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS
- Versions
- 5.15.6+dfsg-1
- 5.15.6+dfsg-2
- 5.15.7+dfsg-2
- 5.15.8+dfsg-1
- 5.15.8+dfsg-1build1
- 5.15.8+dfsg-1build2
- 5.15.8+dfsg-2
- 5.15.9+dfsg-1
- 5.15.9+dfsg-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:22.04:LTS
- Versions
- 5.0.3-1build8
- 5.0.3-1build9
- 5.0.3-1ubuntu0.22.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://lists.debian.org/debian-lts-announce/2020/01/msg00035.html
- https://access.redhat.com/errata/RHSA-2020:0550
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFEVEKETJV7GOXD5RDWL35ESEDHC663E/
- https://access.redhat.com/errata/RHSA-2020:0570
- https://access.redhat.com/errata/RHSA-2020:0569
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFM77GIFWHOECNIERYJQPI2ZJU57GZD5/
- https://access.redhat.com/errata/RHSA-2020:0694
- https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://github.com/uclouvain/openjpeg/issues/1231
- https://www.debian.org/security/2021/dsa-4882
- https://nvd.nist.gov/vuln/detail/CVE-2020-8112