MGASA-2015-0398

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2015-0398.html
Import Source
https://advisories.mageia.org/MGASA-2015-0398.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2015-0398
Upstream
Published
2015-10-13T22:40:25Z
Modified
2026-04-16T01:46:16Z
Summary
Updated openjpeg2 package fixes security vulnerability
Details

Use-after-free vulnerability was found in j2k.c in opj_j2k_write_mco function (rhbz#1263359).

Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure (CVE-2015-6581).

References
Credits

Affected packages

Mageia:5 / openjpeg2

Package

Name
openjpeg2
Purl
pkg:rpm/mageia/openjpeg2?arch=source&distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.1.0-3.2.mga5

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2015-0398.json"