p PatchFirst

CVE-2022-1122

CVE-2022-1122

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

CVSS 5.5 · Medium · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • openjpeg2

    Versions
    • openjpeg2 version 2.4.0 and prior: Affected

    No fix published

  • openjpeg2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.5.0-1

    Update to 2.5.0-1

  • openjpeg2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.5.0-1

    Update to 2.5.0-1

  • openjpeg2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.5.0-1

    Update to 2.5.0-1

  • openjpeg2 Ubuntu:Pro:16.04:LTS

    Versions
    • 2.1.0-2.1
    • 2.1.0-2.1ubuntu0.1
    • 2.1.2-1.1+deb9u2build0.1
    • 2.1.2-1.1+deb9u3build0.16.04.1
    • 2.1.2-1.1+deb9u3ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u5build0.16.04.1
    • 2.1.2-1.1+deb9u5ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u6build0.16.04.1
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm3
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm4
    Affected ranges
    • ECOSYSTEM: < 2.1.2-1.1+deb9u6ubuntu0.1~esm6

    Update to 2.1.2-1.1+deb9u6ubuntu0.1~esm6

  • blender Ubuntu:16.04:LTS

    Versions
    • 2.74+dfsg0-4build2
    • 2.75.a+dfsg0-2ubuntu2
    • 2.75.a+dfsg0-2ubuntu3
    • 2.76.b+dfsg0-3
    • 2.76.b+dfsg0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:16.04:LTS

    Versions
    • 4.8.1-1ubuntu3
    • 4.8.1-1ubuntu4
    • 4.8.2-3.1ubuntu1
    • 4.9.0-3ubuntu2
    • 4.9.0-4ubuntu1
    • 4.9.0-4ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:16.04:LTS

    Versions
    • 4.4.1-1
    • 4.4.1-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • blender Ubuntu:18.04:LTS

    Versions
    • 2.78.c+dfsg0-2build1
    • 2.79+dfsg0-2build1
    • 2.79+dfsg0-3
    • 2.79+dfsg0-3build1
    • 2.79.b+dfsg0-1
    • 2.79.b+dfsg0-1ubuntu1.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:18.04:LTS

    Versions
    • 4.12.2-dfsg1-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:Pro:18.04:LTS

    Versions
    • 2.2.0-1
    • 2.3.0-1
    • 2.3.0-2build0.18.04.1
    • 2.3.0-2ubuntu0.1~esm1
    • 2.3.0-2+deb10u2build0.18.04.1
    • 2.3.0-2+deb10u2ubuntu0.1~esm1
    • 2.3.0-2+deb10u2ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: < 2.3.0-2+deb10u2ubuntu0.1~esm3

    Update to 2.3.0-2+deb10u2ubuntu0.1~esm3

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:18.04:LTS

    Versions
    • 4.5-1
    • 5.0.2-1
    • 5.0.2-1build1
    • 5.0.2-1build2
    • 5.0.2-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:20.04:LTS

    Versions
    • 2.3.0-2
    • 2.3.0-2build1
    • 2.3.1-1
    • 2.3.1-1ubuntu3
    • 2.3.1-1ubuntu4
    • 2.3.1-1ubuntu4.20.04.1
    • 2.3.1-1ubuntu4.20.04.2
    Affected ranges
    • ECOSYSTEM: < 2.3.1-1ubuntu4.20.04.3

    Update to 2.3.1-1ubuntu4.20.04.3

  • blender Ubuntu:20.04:LTS

    Versions
    • 2.80+dfsg-3
    • 2.80+dfsg-3build1
    • 2.80+dfsg-4
    • 2.81.a+dfsg-5build3
    • 2.82+dfsg-1
    • 2.82+dfsg-1build1
    • 2.82.a+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:20.04:LTS

    Versions
    • 4.12.2-dfsg1-4.1ubuntu1
    • 4.13.2-dfsg1-1ubuntu1
    • 4.13.2-dfsg1-4ubuntu1
    • 4.13.2-dfsg1-6
    • 4.13.2-dfsg1-6ubuntu1
    • 4.13.2-dfsg1-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-1ubuntu1
    • 5.12.4+dfsg-1ubuntu3
    • 5.12.5+dfsg-3ubuntu1
    • 5.12.5+dfsg-6ubuntu2
    • 5.12.5+dfsg-7
    • 5.12.5+dfsg-7build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu1.1
    • 5.12.8+dfsg-0ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:20.04:LTS

    Versions
    • 5.0.3-1build2
    • 5.0.3-1build3
    • 5.0.3-1build4
    • 5.0.3-1build5
    • 5.0.3-1ubuntu0.20.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • blender Ubuntu:22.04:LTS

    Versions
    • 2.93.3+dfsg-3
    • 2.93.5+dfsg-1
    • 2.93.5+dfsg-1build1
    • 3.0.1+dfsg-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:22.04:LTS

    Versions
    • 4.13.3withdata-dfsg1-4.1
    • 4.13.3withdata-dfsg2-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:22.04:LTS

    Versions
    • 2.3.1-1ubuntu5
    • 2.3.1-1ubuntu6
    • 2.4.0-3
    • 2.4.0-5
    • 2.4.0-6
    • 2.4.0-6ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 2.4.0-6ubuntu0.2

    Update to 2.4.0-6ubuntu0.2

  • qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS

    Versions
    • 5.15.6+dfsg-1
    • 5.15.6+dfsg-2
    • 5.15.7+dfsg-2
    • 5.15.8+dfsg-1
    • 5.15.8+dfsg-1build1
    • 5.15.8+dfsg-1build2
    • 5.15.8+dfsg-2
    • 5.15.9+dfsg-1
    • 5.15.9+dfsg-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:22.04:LTS

    Versions
    • 5.0.3-1build8
    • 5.0.3-1build9
    • 5.0.3-1ubuntu0.22.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • blender Ubuntu:24.04:LTS

    Versions
    • 3.6.2+dfsg-2ubuntu1
    • 3.6.2+dfsg-2ubuntu2
    • 4.0.2+dfsg-1ubuntu1
    • 4.0.2+dfsg-1ubuntu2
    • 4.0.2+dfsg-1ubuntu4
    • 4.0.2+dfsg-1ubuntu6
    • 4.0.2+dfsg-1ubuntu7
    • 4.0.2+dfsg-1ubuntu8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →