Oval Definition:	oval:org.opensuse.security:def:20221122
Revision Date: 2023-06-22 Version: 1 Title: CVE-2022-1122 Description: A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2022-1122 SUSE CVE-2022-1122 SUSE-SU-2022:1129-1 SUSE-SU-2022:1252-1 Platform(s): openSUSE Leap 15.3 openSUSE Leap 15.4 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-BCL SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis Release Information SUSE Linux Enterprise Module for Package Hub 15 SP3 is installed AND libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Module for Package Hub 15 SP3 is installed AND libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND libopenjp2-7-2.1.0-4.15.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 15 SP1-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed OR SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE CaaS Platform 4.0 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Linux Enterprise Server 15 SP1-BCL is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 15 SP1-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed OR SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Server 15 SP1-BCL is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 15 SP2-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Real Time 15 SP2 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Linux Enterprise Server 15 SP2-BCL is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Manager Server 4.1 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-BCL is installed OR SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR Package Information SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR Package Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR Package Information SUSE OpenStack Cloud 8 is installed OR SUSE OpenStack Cloud Crowbar 8 is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR Package Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR Package Information SUSE OpenStack Cloud 9 is installed OR SUSE OpenStack Cloud Crowbar 9 is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Module for Package Hub 15 SP3 is installed AND libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Linux Enterprise Server 15 SP2-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Enterprise Storage 7 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Real Time 15 SP2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Linux Enterprise Server 15 SP2-BCL is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information libopenjp2-7-2.3.0-150000.3.5.1 is installed AND libopenjp2-7 is signed with openSUSE key Definition Synopsis openSUSE Leap 15.3 is installed AND Package Information libopenjp2-7-2.3.0-150000.3.5.1 is installed AND libopenjp2-7 is signed with openSUSE key OR libopenjp2-7-32bit-2.3.0-150000.3.5.1 is installed AND libopenjp2-7-32bit is signed with openSUSE key OR openjpeg2-2.3.0-150000.3.5.1 is installed AND openjpeg2 is signed with openSUSE key OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed AND openjpeg2-devel is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND Package Information libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND ghostscript is not affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR ghostscript is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 15 SP2-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Real Time 15 SP2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR Package Information SUSE Linux Enterprise Server 15 SP2-BCL is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND libopenjp2-7-2.3.0-150000.3.5.1 is installed OR openjpeg2-2.3.0-150000.3.5.1 is installed OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR Package Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libopenjp2-7-2.1.0-4.15.1 is installed OR ghostscript is not affected OR ghostscript-devel is not affected OR ghostscript-x11 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND Package Information libopenjp2-7-2.3.0-150000.3.8.1 is installed OR openjpeg2-2.3.0-150000.3.8.1 is installed OR openjpeg2-devel-2.3.0-150000.3.8.1 is installed
BACK