Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2020-6851
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.012
EPSS Ranking
78.2%
CVSS Severity
CVSS v3 Score
7.5
CVSS v2 Score
5.0
References
https://access.redhat.com/errata/RHSA-2020:0262
https://access.redhat.com/errata/RHSA-2020:0274
https://access.redhat.com/errata/RHSA-2020:0296
https://github.com/uclouvain/openjpeg/issues/1228
https://lists.debian.org/debian-lts-announce/2020/01/msg00025.html
https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3/
https://www.debian.org/security/2021/dsa-4882
https://www.oracle.com/security-alerts/cpujul2020.html
https://access.redhat.com/errata/RHSA-2020:0262
https://access.redhat.com/errata/RHSA-2020:0274
https://access.redhat.com/errata/RHSA-2020:0296
https://github.com/uclouvain/openjpeg/issues/1228
https://lists.debian.org/debian-lts-announce/2020/01/msg00025.html
https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3/
https://www.debian.org/security/2021/dsa-4882
https://www.oracle.com/security-alerts/cpujul2020.html
Products affected by CVE-2020-6851
Oracle
»
Georaster
»
Version:
18c
cpe:2.3:a:oracle:georaster:18c
Oracle
»
Outside In Technology
»
Version:
8.5.4
cpe:2.3:a:oracle:outside_in_technology:8.5.4
Oracle
»
Outside In Technology
»
Version:
8.5.5
cpe:2.3:a:oracle:outside_in_technology:8.5.5
Uclouvain
»
Openjpeg
»
Version:
N/A
cpe:2.3:a:uclouvain:openjpeg:-
Uclouvain
»
Openjpeg
»
Version:
1.0
cpe:2.3:a:uclouvain:openjpeg:1.0
Uclouvain
»
Openjpeg
»
Version:
1.1
cpe:2.3:a:uclouvain:openjpeg:1.1
Uclouvain
»
Openjpeg
»
Version:
1.2
cpe:2.3:a:uclouvain:openjpeg:1.2
Uclouvain
»
Openjpeg
»
Version:
1.3
cpe:2.3:a:uclouvain:openjpeg:1.3
Uclouvain
»
Openjpeg
»
Version:
1.4
cpe:2.3:a:uclouvain:openjpeg:1.4
Uclouvain
»
Openjpeg
»
Version:
1.5
cpe:2.3:a:uclouvain:openjpeg:1.5
Uclouvain
»
Openjpeg
»
Version:
1.5.1
cpe:2.3:a:uclouvain:openjpeg:1.5.1
Uclouvain
»
Openjpeg
»
Version:
1.5.2
cpe:2.3:a:uclouvain:openjpeg:1.5.2
Uclouvain
»
Openjpeg
»
Version:
2.0
cpe:2.3:a:uclouvain:openjpeg:2.0
Uclouvain
»
Openjpeg
»
Version:
2.0.0
cpe:2.3:a:uclouvain:openjpeg:2.0.0
Uclouvain
»
Openjpeg
»
Version:
2.0.1
cpe:2.3:a:uclouvain:openjpeg:2.0.1
Uclouvain
»
Openjpeg
»
Version:
2.1
cpe:2.3:a:uclouvain:openjpeg:2.1
Uclouvain
»
Openjpeg
»
Version:
2.1.0
cpe:2.3:a:uclouvain:openjpeg:2.1.0
Uclouvain
»
Openjpeg
»
Version:
2.1.1
cpe:2.3:a:uclouvain:openjpeg:2.1.1
Uclouvain
»
Openjpeg
»
Version:
2.1.2
cpe:2.3:a:uclouvain:openjpeg:2.1.2
Uclouvain
»
Openjpeg
»
Version:
2.2.0
cpe:2.3:a:uclouvain:openjpeg:2.2.0
Uclouvain
»
Openjpeg
»
Version:
2.3.0
cpe:2.3:a:uclouvain:openjpeg:2.3.0
Uclouvain
»
Openjpeg
»
Version:
2.3.1
cpe:2.3:a:uclouvain:openjpeg:2.3.1
Debian
»
Debian Linux
»
Version:
10.0
cpe:2.3:o:debian:debian_linux:10.0
Debian
»
Debian Linux
»
Version:
8.0
cpe:2.3:o:debian:debian_linux:8.0
Debian
»
Debian Linux
»
Version:
9.0
cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject
»
Fedora
»
Version:
30
cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject
»
Fedora
»
Version:
31
cpe:2.3:o:fedoraproject:fedora:31
Redhat
»
Enterprise Linux
»
Version:
8.0
cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat
»
Enterprise Linux Desktop
»
Version:
7.0
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat
»
Enterprise Linux Eus
»
Version:
7.7
cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat
»
Enterprise Linux Eus
»
Version:
8.1
cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat
»
Enterprise Linux Eus
»
Version:
8.2
cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat
»
Enterprise Linux Eus
»
Version:
8.4
cpe:2.3:o:redhat:enterprise_linux_eus:8.4
Redhat
»
Enterprise Linux Server
»
Version:
7.0
cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat
»
Enterprise Linux Server Aus
»
Version:
7.7
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat
»
Enterprise Linux Server Aus
»
Version:
8.2
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat
»
Enterprise Linux Server Aus
»
Version:
8.4
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
Redhat
»
Enterprise Linux Server Tus
»
Version:
7.7
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat
»
Enterprise Linux Server Tus
»
Version:
8.2
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
Redhat
»
Enterprise Linux Server Tus
»
Version:
8.4
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4
Redhat
»
Enterprise Linux Workstation
»
Version:
7.0
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved