Skip to content
4.3 Medium

CVE-2023-39327 Openjpeg: malicious files can cause the program to enter a large loop

Description

A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitable remotely over the network, without an account and if a user takes an action; the impact on data or service is limited.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Affected products and versions

Product Affected versions Fixed in
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat AI Inference Server 3.2 1772713830 earliest → < 1772713830 1772713830
The 1339 CVEs of Red Hat Enterprise Linux 6 →
Track this CVE