CVE-2020-27814
CVE-2020-27814
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 2.0%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
25 ene 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.
Productos afectados
n/a · openjpeg¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://bugzilla.redhat.com/show_bug.cgi?id=1901998https://github.com/uclouvain/openjpeg/issues/1283https://lists.debian.org/debian-lts-announce/2021/02/msg00011.htmlhttps://security.gentoo.org/glsa/202101-29https://www.debian.org/security/2021/dsa-4882https://www.oracle.com//security-alerts/cpujul2021.html