CVE:CVE-2021-3575
CNNVD:CNNVD-202106-1234
OpenJPEG是一款基于C语言的开源JPEG2000编码解码器。
OpenJPEG 存在缓冲区错误漏洞，攻击者可利用该漏洞通过color.c触发缓冲区溢出，以触发拒绝服务，并可能运行代码。
solution:Upgrade uclouvain openjpeg to a higher version than 2.4.0,and avoid the version (,2.4.0]; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34