Vulnerability Details : CVE-2020-15389
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.
Vulnerability category: Memory Corruption
Products affected by CVE-2020-15389
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-15389
1.93%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 88 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-15389
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:P |
8.6
|
4.9
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H |
2.2
|
4.2
|
NIST |
CWE ids for CVE-2020-15389
-
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-15389
-
https://www.oracle.com/security-alerts/cpuoct2020.html
Oracle Critical Patch Update Advisory - October 2020Third Party Advisory
-
https://pastebin.com/4sDKQ7U8
> [Suggested description] > jp2/opj_decompress.c in OpenJPEG through 2.3.1 has - Pastebin.comThird Party Advisory
-
https://www.debian.org/security/2021/dsa-4882
Debian -- Security Information -- DSA-4882-1 openjpeg2Third Party Advisory
-
https://www.oracle.com//security-alerts/cpujul2021.html
Oracle Critical Patch Update Advisory - July 2021Third Party Advisory
-
https://github.com/uclouvain/openjpeg/issues/1261
Heap use-after-free · Issue #1261 · uclouvain/openjpeg · GitHubPatch;Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html
[SECURITY] [DLA 2277-1] openjpeg2 security updateMailing List;Third Party Advisory
-
https://security.gentoo.org/glsa/202101-29
OpenJPEG: Multiple vulnerabilities (GLSA 202101-29) — Gentoo securityThird Party Advisory
Jump to