Bug 1227413 - VUL-0: CVE-2023-39327: ghostscript: openjpeg: malicious files can cause a large loop that continuously prints warning messages on the terminal
Summary: VUL-0: CVE-2023-39327: ghostscript: openjpeg: malicious files can cause a lar...
Status: NEW
Alias: None
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Minor
Target Milestone: ---
Assignee: Johannes Meixner
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/412864/
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2023-39327
  Show dependency tree / graph
 
Reported: 2024-07-04 18:22 UTC by Camila Camargo de Matos
Modified: 2024-07-05 07:06 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Camila Camargo de Matos 2024-07-04 18:22:43 UTC 
+++ This bug was initially created as a clone of Bug #1227410 +++

In openjpeg, maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

References:

https://github.com/uclouvain/openjpeg/issues/1472

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39327
https://bugzilla.redhat.com/show_bug.cgi?id=2295812