Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-43593HistoryDec 23, 2022 - 11:03 p.m.
CVE-2022-43593
2022-12-2323:03:51
Debian Security Bug Tracker
security-tracker.debian.org
14
denial of service
openimageio
null pointer dereference
imageoutput object
malicious input
unix
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
50.6%
A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An attacker can provide malicious input to trigger this vulnerability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openimageio | < 2.4.7.1+dfsg-2 | openimageio_2.4.7.1+dfsg-2_all.deb |
| Debian | 11 | all | openimageio | < 2.2.10.1+dfsg-1+deb11u1 | openimageio_2.2.10.1+dfsg-1+deb11u1_all.deb |
| Debian | 999 | all | openimageio | < 2.4.7.1+dfsg-2 | openimageio_2.4.7.1+dfsg-2_all.deb |
Related
talos
talos
osv
osv
CVE-2022-43593
2022-12-22 22:15:16
OpenImageIO-2.4.6.0-1.1 on GA media
2024-06-15 00:00:00
openimageio - security update
2023-04-05 00:00:00
cvelist
cvelist
CVE-2022-43593
2022-12-23 23:03:51
prion
prion
Null pointer dereference
2022-12-22 22:15:00
cve
cve
CVE-2022-43593
2022-12-23 23:03:51
ubuntucve
ubuntucve
CVE-2022-43593
2022-12-22 00:00:00
nvd
nvd
CVE-2022-43593
2022-12-22 22:15:16
nessus
nessus
Debian DLA-3382-1 : openimageio - LTS security update
2023-04-10 00:00:00
Debian DSA-5384-1 : openimageio - security update
2023-04-11 00:00:00
GLSA-202305-33 : OpenImageIO: Multiple Vulnerabilities
2023-05-30 00:00:00
debian
debian
[SECURITY] [DLA 3382-1] openimageio security update
2023-04-04 23:34:51
[SECURITY] [DSA 5384-1] openimageio security update
2023-04-10 09:18:20
openvas
openvas
Debian: Security Advisory (DLA-3382-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5384-1)
2023-04-11 00:00:00
Mageia: Security Advisory (MGASA-2023-0151)
2023-04-24 00:00:00
talosblog
talosblog
mageia
mageia
Updated openimageio packages fix security vulnerability
2023-04-24 03:20:26
gentoo
gentoo
OpenImageIO: Multiple Vulnerabilities
2023-05-30 00:00:00
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
50.6%
Related for DEBIANCVE:CVE-2022-43593