USN-4782-1: OpenJPEG vulnerabilities
It was discovered that OpenJPEG incorrectly handled certain image files. A remote attacker could possibly use this issue to cause a denial of service. CVE-2016-10506 and CVE-2017-12982 affected only Ubuntu 16.04 ESM. CVE-2018-16375, CVE-2018-20845 and CVE-2019-12973 affected only Ubuntu 18.04 ESM.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for the OpenJPEG vulnerabilities?
The vulnerability ID for the OpenJPEG vulnerabilities is CVE-2016-10506, CVE-2017-12982, CVE-2018-16375, CVE-2018-20845, and CVE-2019-12973.
What is the severity of the OpenJPEG vulnerabilities?
The severity of the OpenJPEG vulnerabilities is not specified in the information provided.
Which versions of Ubuntu are affected by the OpenJPEG vulnerabilities?
Only Ubuntu 16.04 ESM and Ubuntu 18.04 ESM are affected by the OpenJPEG vulnerabilities.
How can a remote attacker exploit the OpenJPEG vulnerabilities?
A remote attacker could possibly exploit the OpenJPEG vulnerabilities to cause a denial of service.
How can I fix the OpenJPEG vulnerabilities?
To fix the OpenJPEG vulnerabilities, update the libopenjp2-7 package to version 2.3.0-2ubuntu0.1~esm1 for Ubuntu 16.04 ESM and to version 2.1.2-1.1+deb9u6ubuntu0.1~esm1 for Ubuntu 18.04 ESM.