Heap-based buffer overflow in OpenJPEG - CVE-2024-56826

Vulnerability identifier: #VU101962

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-56826

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

OpenJPEG
Debian Linux
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
Fedora
IBM Cloud Pak for Watson AIOps
libopenjp2-7 (Ubuntu package)
libopenjp2-tools (Ubuntu package)
libopenjp3d-tools (Ubuntu package)
libopenjp3d7 (Ubuntu package)
libopenjp2-7
openjpeg2-debugsource
libopenjp2-7-debuginfo
openjpeg2-debuginfo
openjpeg2-devel
openjpeg2
libopenjp2-7-32bit
libopenjp2-7-32bit-debuginfo
openjpeg2 (Debian package)
openjpeg2-tools
openjpeg2-help
ghostscript (Ubuntu package)
App Connect Enterprise Certified Container

Install updates from vendor's website.

OpenJPEG - update to 2.5.3
IBM Cloud Pak for Watson AIOps - update to 4.10.0
libopenjp2-7 (Ubuntu package) - addressed in versions Ubuntu Pro, 2.3.1-1ubuntu4.20.04.4, 2.4.0-6ubuntu0.3, 2.5.0-2ubuntu0.3, 2.5.0-2ubuntu1.2
libopenjp2-tools (Ubuntu package) - addressed in versions Ubuntu Pro, 2.3.1-1ubuntu4.20.04.4, 2.4.0-6ubuntu0.3, 2.5.0-2ubuntu0.3, 2.5.0-2ubuntu1.2
libopenjp3d-tools (Ubuntu package) - addressed in versions Ubuntu Pro, 2.3.1-1ubuntu4.20.04.4, 2.4.0-6ubuntu0.3
libopenjp3d7 (Ubuntu package) - addressed in versions Ubuntu Pro, 2.3.1-1ubuntu4.20.04.4, 2.4.0-6ubuntu0.3
libopenjp2-7 - addressed in versions 2.1.0-4.21.1, 2.3.0-150000.3.18.1
openjpeg2-debugsource - addressed in versions 2.1.0-4.21.1, 2.3.0-150000.3.18.1
libopenjp2-7-debuginfo - addressed in versions 2.1.0-4.21.1, 2.3.0-150000.3.18.1
openjpeg2-debuginfo - addressed in versions 2.1.0-4.21.1, 2.3.0-150000.3.18.1
openjpeg2-devel - update to 2.3.0-150000.3.18.1
openjpeg2 - update to 2.3.0-150000.3.18.1
libopenjp2-7-32bit - update to 2.3.0-150000.3.18.1
libopenjp2-7-32bit-debuginfo - update to 2.3.0-150000.3.18.1
openjpeg2 (Debian package) - update to 2.5.0-2+deb12u1
openjpeg2 - update to 2.5.0-5
openjpeg2-debuginfo - update to 2.5.0-5
openjpeg2-debugsource - update to 2.5.0-5
openjpeg2-devel - update to 2.5.0-5
openjpeg2-tools - update to 2.5.0-5
openjpeg2-help - update to 2.5.0-5
openjpeg2 - update to 2.5.3-1.fc40
ghostscript (Ubuntu package) - addressed in versions 9.26~dfsg+0-0ubuntu0.16.04.14+esm9, 9.26~dfsg+0-0ubuntu0.18.04.18+esm4, 9.50~dfsg-5ubuntu4.15+esm1, 9.55.0~dfsg1-0ubuntu5.12, 10.02.1~dfsg1-0ubuntu7.7, 10.03.1~dfsg1-0ubuntu2.4, 10.05.0dfsg1-0ubuntu1.1
App Connect Enterprise Certified Container - update to 12.8.0

• https://github.com/uclouvain/openjpeg/issues/1563
• https://github.com/uclouvain/openjpeg/pull/1566
• https://github.com/uclouvain/openjpeg/pull/1566/commits/98592ee6d6904f1b48e8207238779b89a63befa2
• https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8

• Multiple vulnerabilities in OpenJPEG
• Fedora 40 update for openjpeg2
• SUSE update for openjpeg2
• SUSE update for openjpeg2
• openEuler update for openjpeg2
• Ubuntu update for openjpeg2
• Debian update for openjpeg2
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Ubuntu update for ghostscript