Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-43592HistoryDec 23, 2022 - 11:03 p.m.
CVE-2022-43592
2022-12-2323:03:51
Debian Security Bug Tracker
security-tracker.debian.org
16
information disclosure
openimageio
dpxoutput
unix
cve-2022-43592
heap data
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
52.7%
An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openimageio | < 2.4.7.1+dfsg-2 | openimageio_2.4.7.1+dfsg-2_all.deb |
| Debian | 11 | all | openimageio | < 2.2.10.1+dfsg-1+deb11u1 | openimageio_2.2.10.1+dfsg-1+deb11u1_all.deb |
| Debian | 999 | all | openimageio | < 2.4.7.1+dfsg-2 | openimageio_2.4.7.1+dfsg-2_all.deb |
Related
talos
talos
osv
osv
CVE-2022-43592
2022-12-22 22:15:16
OpenImageIO-2.4.6.0-1.1 on GA media
2024-06-15 00:00:00
openimageio - security update
2023-04-05 00:00:00
cvelist
cvelist
CVE-2022-43592
2022-12-23 23:03:51
cnvd
cnvd
OpenImageIO Information Disclosure Vulnerability (CNVD-2023-55387)
2022-12-23 00:00:00
cve
cve
CVE-2022-43592
2022-12-23 23:03:51
ubuntucve
ubuntucve
CVE-2022-43592
2022-12-22 00:00:00
prion
prion
Information disclosure
2022-12-22 22:15:00
nvd
nvd
CVE-2022-43592
2022-12-22 22:15:16
nessus
nessus
Debian DLA-3382-1 : openimageio - LTS security update
2023-04-10 00:00:00
Debian DSA-5384-1 : openimageio - security update
2023-04-11 00:00:00
GLSA-202305-33 : OpenImageIO: Multiple Vulnerabilities
2023-05-30 00:00:00
debian
debian
[SECURITY] [DLA 3382-1] openimageio security update
2023-04-04 23:34:51
[SECURITY] [DSA 5384-1] openimageio security update
2023-04-10 09:18:20
openvas
openvas
Debian: Security Advisory (DLA-3382-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5384-1)
2023-04-11 00:00:00
Mageia: Security Advisory (MGASA-2023-0151)
2023-04-24 00:00:00
mageia
mageia
Updated openimageio packages fix security vulnerability
2023-04-24 03:20:26
talosblog
talosblog
gentoo
gentoo
OpenImageIO: Multiple Vulnerabilities
2023-05-30 00:00:00
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
52.7%
Related for DEBIANCVE:CVE-2022-43592