CVE-2018-14423 — Divide By Zero in Openjpeg

CWE-369 — Divide By Zero12 documents8 sources
Severity
7.5HIGHNVD
OSV9.8
EPSS
1.6%
top 18.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
THE Openjpeg Project Openjpeg2Uclouvain OpenjpegDebian Linux
Timeline
PublishedJul 19
Latest updateMay 13

Description

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶Debianthe_openjpeg_project/openjpeg2< 2.3.0-2+3
▶Ubuntuthe_openjpeg_project/openjpeg2< 2.3.0-2build0.18.04.1

Also affects: Debian Linux 8.0, 9.0

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-vc8p-9hr8-jgqx: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi↗2022-05-13
▶
OSV
openjpeg2 vulnerabilities↗2019-08-21
▶
CVEList
CVE-2018-14423: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi↗2018-07-19
▶
OSV
CVE-2018-14423: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi↗2018-07-19
▶

📋Vendor Advisories

3
Ubuntu
OpenJPEG vulnerabilities↗2019-08-21
▶
Red Hat
openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c↗2018-07-16
▶
Debian
CVE-2018-14423: openjpeg2 - Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, an...↗2018
▶

💬Community

4
Bugzilla
CVE-2018-14423 openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c↗2018-07-30
▶
Bugzilla
CVE-2018-14423 mingw-openjpeg2: openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c [fedora-all]↗2018-07-30
▶
Bugzilla
CVE-2018-14423 openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c [fedora-all]↗2018-07-30
▶
Bugzilla
CVE-2018-14423 openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c [epel-all]↗2018-07-30
▶
CVE-2018-14423 — Divide By Zero in Uclouvain Openjpeg | cvebase