Division by zero in OpenJPEG - CVE-2018-20845

Vulnerability identifier: #VU63447

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-20845

CWE-ID: CWE-369

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a division by zero error in the functions pi_next_pcrl(), pi_next_cprl(), and pi_next_rpcl() in openmj2/pi.c. A remote attacker can create a specially crafted file, trick the victim into opening it and cause a denial of service.

OpenJPEG
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
SUSE Linux Enterprise Module for Packagehub Subpackages
libopenjp2-7
libopenjp2-7-debuginfo
openjpeg2-debuginfo
openjpeg2-debugsource
openjpeg2
openjpeg2-devel
libopenjp2-7-32bit
libopenjp2-7-32bit-debuginfo

Install updates from vendor's website.

OpenJPEG - update to 2.3.1
libopenjp2-7 - addressed in versions 2.1.0-4.15.1, 2.3.0-150000.3.5.1
libopenjp2-7-debuginfo - addressed in versions 2.1.0-4.15.1, 2.3.0-150000.3.5.1
openjpeg2-debuginfo - addressed in versions 2.1.0-4.15.1, 2.3.0-150000.3.5.1
openjpeg2-debugsource - addressed in versions 2.1.0-4.15.1, 2.3.0-150000.3.5.1
openjpeg2 - update to 2.3.0-150000.3.5.1
openjpeg2-devel - update to 2.3.0-150000.3.5.1
libopenjp2-7-32bit - update to 2.3.0-150000.3.5.1
libopenjp2-7-32bit-debuginfo - update to 2.3.0-150000.3.5.1

• http://www.securityfocus.com/bid/108921
• https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf

• SUSE update for openjpeg2
• SUSE update for openjpeg2