Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2020-27823 PUBLISHED CVSS 7.800000190734863 HIGH

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.21openjpeg2.3.1-r5, 0, 1.3-r0
Alpine:v3.23openjpeg2.3.1-r5, 2.2.0-r2, 2.2.0-r1
Alpine:v3.14openjpeg2.3.0-r2, 2.1.0-r0, 2.1.0-r1
Alpine:v3.11openjpeg2.3.0-r3, 2.3.1-r0, 2.3.1-r2
Alpine:v3.20openjpeg2.1.2-r1, 2.3.0-r0, 2.3.0-r1
Alpine:v3.13openjpeg1.3-r1, 0, 1.3-r1
Alpine:v3.22openjpeg2.3.1-r5, 0, 1.3-r0
Alpine:v3.12openjpeg2.3.0-r2, 0, 1.3-r0
Alpine:v3.10openjpeg1.5.0-r2, 2.3.1-r0, 2.1.0-r0
Alpine:v3.16openjpeg2.2.0-r2, 2.3.0-r0, 2.3.0-r2
Alpine:v3.15openjpeg2.1.2-r1, 2.3.1-r5, 2.3.1-r4
Alpine:v3.17openjpeg2.1.2-r1, 2.1.2-r0, 2.1.1-r1
Alpine:v3.18openjpeg2.3.1-r5, 2.3.1-r5, 2.3.1-r4
Alpine:v3.19openjpeg0, 2.3.1-r5, 2.3.1-r4

Timeline

References

Open in Interactive Console →