Search CVE reports


Toggle filters

81 – 90 of 243 results


CVE-2020-27841

Low priority

Some fixes available 15 of 27

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact...

7 affected packages

openjpeg2, insighttoolkit4, qtwebengine-opensource-src, blender, ghostscript...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjpeg2 Fixed Fixed Fixed Fixed
insighttoolkit4 Not in release Not affected Not affected Not affected
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation
blender Not affected Not affected Not affected Not affected
ghostscript Not affected Not affected Not affected Fixed
openjpeg Not in release Not in release Not in release Not in release
texmaker Not affected Not affected Not affected Not affected
Show all 7 packages Show less packages

CVE-2020-27824

Medium priority

Some fixes available 16 of 64

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this...

7 affected packages

openjpeg2, texmaker, blender, insighttoolkit4, qtwebengine-opensource-src...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openjpeg2 Fixed Fixed Fixed Fixed
texmaker Needs evaluation Needs evaluation Needs evaluation Needs evaluation
blender Needs evaluation Needs evaluation Needs evaluation Needs evaluation
insighttoolkit4 Not in release Needs evaluation Needs evaluation Needs evaluation
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation
ghostscript Not affected Not affected Not affected Fixed
openjpeg Not in release Not in release Not in release Not in release
Show all 7 packages Show less packages

CVE-2020-27823

Medium priority

Some fixes available 13 of 60

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as...

7 affected packages

texmaker, blender, insighttoolkit4, qtwebengine-opensource-src, ghostscript...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
texmaker Needs evaluation Needs evaluation Needs evaluation Needs evaluation
blender Needs evaluation Needs evaluation Needs evaluation Needs evaluation
insighttoolkit4 Not in release Needs evaluation Needs evaluation Needs evaluation
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation
ghostscript Not affected Not affected Not affected Not affected
openjpeg2 Fixed Fixed Fixed Fixed
openjpeg Not in release Not in release Not in release Not in release
Show all 7 packages Show less packages

CVE-2020-27814

Medium priority

Some fixes available 15 of 26

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running...

7 affected packages

blender, ghostscript, insighttoolkit4, openjpeg, openjpeg2...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
blender Not affected Not affected Not affected Not affected
ghostscript Not affected Not affected Not affected Fixed
insighttoolkit4 Not in release Not affected Not affected Not affected
openjpeg Not in release Not in release Not in release Not in release
openjpeg2 Fixed Fixed Fixed Fixed
texmaker Not affected Not affected Not affected Not affected
qtwebengine-opensource-src Vulnerable Vulnerable Vulnerable Not affected
Show all 7 packages Show less packages

CVE-2020-27792

Medium priority
Fixed

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer...

1 affected package

ghostscript

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ghostscript Not affected Fixed Fixed
Show less packages

CVE-2020-21890

Medium priority
Fixed

Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.

1 affected package

ghostscript

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ghostscript Not affected Fixed Fixed
Show less packages

CVE-2020-21710

Medium priority
Fixed

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

1 affected package

ghostscript

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ghostscript Not affected Fixed Fixed
Show less packages

CVE-2020-17538

Medium priority
Fixed

A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

1 affected package

ghostscript

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ghostscript Fixed Fixed
Show less packages

CVE-2020-16310

Medium priority
Fixed

A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

1 affected package

ghostscript

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ghostscript Fixed Fixed
Show less packages

CVE-2020-16309

Medium priority
Fixed

A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. This is fixed in v9.51.

1 affected package

ghostscript

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
ghostscript Fixed Fixed
Show less packages