A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786708350 advisory.

  - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop     and continuously print warning messages on the terminal. (CVE-2023-39327)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787149537 advisory.

  - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop     and continuously print warning messages on the terminal. (CVE-2023-39327)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787149537 advisory.

  - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop     and continuously print warning messages on the terminal. (CVE-2023-39327)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20203-1 advisory.

    - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages     on the terminal (bsc#1227412).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0330-1 advisory.

    - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages     on the terminal (bsc#1227412).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0320-1 advisory.

    - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages     on the terminal (bsc#1227412).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3946-1 advisory.

    - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning     messages on the terminal (bsc#1227410).

    Other bug fixes:

    - Ensure no bundled libraries are used (bsc#1250467).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7623-1 advisory.

    It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a     user or system were tricked into opening a specially crafted file, an attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
    (CVE-2023-39327)

    Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker     could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and     Ubuntu 18.04 LTS. (CVE-2024-29508)

    It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.
    (CVE-2024-33871)

    It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu     18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836)

    Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker     could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS,     Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop     and continuously print warning messages on the terminal. (CVE-2023-39327)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3ecdf562bf advisory.

    Backport fix for CVE-2023-39327.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7037-1 advisory.

    It was discovered that OpenJPEG could enter a large loop and continuously print warning messages when     given specially crafted input. An attacker could potentially use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
360560	AlmaLinux 9.2 [TuxCare] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-devel-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786708350)	Nessus	Alma Linux Local Security Checks	Local	medium
352027	Rocky Linux 9.6 [TuxCare] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-devel-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787149537)	Nessus	Rocky Linux Local Security Checks	Local	medium
351949	AlmaLinux 9.6 [TuxCare] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-devel-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787149537)	Nessus	Alma Linux Local Security Checks	Local	medium
299124	openSUSE 16 Security Update : openjpeg2 (openSUSE-SU-2026:20203-1)	Nessus	SuSE Local Security Checks	Local	medium
297422	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openjpeg2 (SUSE-SU-2026:0330-1)	Nessus	SuSE Local Security Checks	Local	medium
297199	SUSE SLES12 Security Update : openjpeg2 (SUSE-SU-2026:0320-1)	Nessus	SuSE Local Security Checks	Local	medium
274418	SUSE SLED15: libopenjpeg1 / libopenjpeg1-32bit / openjpeg / openjpeg-devel / etc (SUSE-SU-2025:3946-1)	Nessus	SuSE Local Security Checks	Local	medium
241623	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Ghostscript vulnerabilities (USN-7623-1)	Nessus	Ubuntu Local Security Checks	Local	low
226025	Linux Distros Unpatched Vulnerability : CVE-2023-39327	Nessus	Misc.	Local	medium
211322	Fedora 41 : openjpeg (2024-3ecdf562bf)	Nessus	Fedora Local Security Checks	Local	medium
207801	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : OpenJPEG vulnerability (USN-7037-1)	Nessus	Ubuntu Local Security Checks	Local	medium

Detections

Analytics

CVE-2023-39327

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

low

medium

medium

medium