This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-29338 →

DEBIAN-CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker...

Original description

The description as published by the source.

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 openjpeg2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-4"}]}]

Debian:13 openjpeg2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-4"}]}]

Debian:14 openjpeg2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-4"}]}]

References

advisory security-tracker.debian.org