CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2020-27823

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Score
7.8 high
Published
2021-05-13
Links
NVD · cve.org · Report wrong data

Matched ports (1)

PortPackageVersionStatusMaintainer
graphics/openjpeg15openjpeg151.5.2_5unaddressedsunpoet@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>openjpeg15</name>
	<range><lt>2.4.0</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker
	to pass specially crafted x,y offset input to OpenJPEG to use during
	encoding. The highest threat from this vulnerability is to
	confidentiality, integrity, as well as system availability.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2020-27823</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2020-27823</url>
    </references>
    <dates>
      <discovery>2021-05-13</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>