Description
A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to
pass specially crafted x,y offset input to OpenJPEG to use during encoding.
The highest threat from this vulnerability is to confidentiality,
integrity, as well as system availability.
Package
| Upstream: | needs-triage
|
| Ubuntu 18.04 LTS: | not-affected
(code not compiled)
|
| Ubuntu 20.04 LTS: | not-affected
(uses system openjpeg2)
|
| Ubuntu 21.10: | not-affected
(uses system openjpeg2)
|
| Ubuntu 16.04 ESM: | not-affected
(code not compiled)
|
| Ubuntu 22.04 LTS: | not-affected
(uses system openjpeg2)
|
| Ubuntu 14.04 ESM: | DNE
|
Patches:
Package
| Upstream: | needs-triage
|
| Ubuntu 18.04 LTS: | DNE
|
| Ubuntu 20.04 LTS: | DNE
|
| Ubuntu 21.10: | DNE
|
| Ubuntu 22.04 LTS: | DNE
|
| Ubuntu 14.04 ESM: | needs-triage
|
Patches:
Updated: 2022-04-25 00:49:24 UTC (commit ecc1009cb19540b950de59270950018900f37f15)