CVE-2018-5785

Name	CVE-2018-5785
Description	In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-4405-1
Debian Bugs	888533

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openjpeg2 (PTS)	jessie, jessie (lts)	2.1.0-2+deb8u14	fixed
	stretch (security), stretch (lts), stretch	2.1.2-1.1+deb9u7	fixed
	buster (security), buster, buster (lts)	2.3.0-2+deb10u2	fixed
	bullseye	2.4.0-3	fixed
	sid, trixie, bookworm	2.5.0-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
openjpeg2	source	jessie	(not affected)
openjpeg2	source	stretch	2.1.2-1.1+deb9u3		DSA-4405-1
openjpeg2	source	(unstable)	2.3.0-2	low		888533

Notes

[jessie] - openjpeg2 <not-affected> (Vulnerable code introduced later)
https://github.com/uclouvain/openjpeg/issues/1057
https://github.com/uclouvain/openjpeg/commit/ca16fe55014c57090dd97369256c7657aeb25975
vulnerable code introduced in
https://github.com/uclouvain/openjpeg/commit/33a0e66eb129c4e91b555a6b8dd9eab512fbfeb8