Alpine/openjpeg: medium 5.5
In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp f
Action: Upgrade openjpeg to 2.3.1-r5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.1-r5 | - |
Fixed versions
| 2.3.1-r5 |
Sources
- osv: ALPINE-CVE-2019-12973#Alpine:v3.12/openjpeg
- https://security.alpinelinux.org/vuln/CVE-2019-12973
published · modified · JSON