MGASA-2015-0398

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2015-0398.html

Import Source

https://advisories.mageia.org/MGASA-2015-0398.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2015-0398

Related

CVE-2015-6581

Published

2015-10-13T22:40:25Z

Modified

2015-10-13T22:35:37Z

Summary

Updated openjpeg2 package fixes security vulnerability

Details

Use-after-free vulnerability was found in j2k.c in opjj2kwrite_mco function (rhbz#1263359).

Double free vulnerability in the opjj2kcopydefaulttcpandcreate_tcd function in j2k.c in OpenJPEG allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure (CVE-2015-6581).

References

https://advisories.mageia.org/MGASA-2015-0398.html
https://bugs.mageia.org/show_bug.cgi?id=16880
https://lists.fedoraproject.org/pipermail/package-announce/2015-October/168012.html
https://lists.fedoraproject.org/pipermail/package-announce/2015-October/168736.html

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2015-0398

Affected packages