CVE-2018-20845

Published: 26 June 2019

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).

From the Ubuntu Security Team

It was discovered that OpenJPEG incorrectly handled certain image files. A remote attacker could possibly use this issue to cause a denial of service.

Notes

Marking emscripten ignored as openjpeg2 code is only for test/example.

Ubuntu openjpeg2 packages are built with BUILD_MJ2:BOOL=OFF, so
the vulnerable code is not compiled

the openjpeg package does not include the file patched by commit
c5bd64ea146. Before the refactoring, there was a single pi.c file,
which according to the code itself, seems to be affected by this
vulnerability, however, it looks like the vulnerability in this
case is related to CVE-2018-14423 instead, which has a very similar
patch (bd88611ed9a).

Status

Severity score breakdown

References

• https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf
• https://ubuntu.com/security/notices/USN-4782-1
• https://www.cve.org/CVERecord?id=CVE-2018-20845
• NVD
• Launchpad
• Debian