Lucene search
UbuntuUSN-5620-1HistorySep 20, 2022 - 12:00 a.m.
OpenEXR vulnerabilities
2022-09-2000:00:00
ubuntu.com
173
Releases
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- openexr - tools for the OpenEXR image format
Details
It was discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code. These issues only affected Ubuntu 20.04 ESM. (CVE-2021-3598,
CVE-2021-3605, CVE-2021-20296, CVE-2021-23215, CVE-2021-26260)
It was discovered that OpenEXR incorrectly handled certain EXR
image files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code. (CVE-2021-3933)
It was discovered that OpenEXR incorrectly handled certain EXR image files.
An attacker could possibly use this issue to cause a crash. (CVE-2021-3941)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | openexr | < 2.5.7-1ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libopenexr-dev | < 2.5.7-1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libopenexr25 | < 2.5.7-1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libopenexr25-dbgsym | < 2.5.7-1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | openexr | < 2.5.7-1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | openexr-dbgsym | < 2.5.7-1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | openexr-doc | < 2.5.7-1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libopenexr25 | < 2.5.7-1ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | openexr | < 2.3.0-6ubuntu0.5+esm1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libopenexr-dev | < 2.3.0-6ubuntu0.5 | UNKNOWN |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-5620-1)
2023-01-27 00:00:00
Ubuntu: Security Advisory (USN-4996-1)
2021-06-23 00:00:00
Ubuntu: Security Advisory (USN-4996-2)
2022-08-26 00:00:00
nessus
nessus
Ubuntu 20.04 ESM / 22.04 ESM : OpenEXR vulnerabilities (USN-5620-1)
2023-10-23 00:00:00
Ubuntu 16.04 ESM : OpenEXR vulnerabilities (USN-4996-2)
2021-06-22 00:00:00
Ubuntu 18.04 LTS : OpenEXR vulnerabilities (USN-4996-1)
2021-06-22 00:00:00
osv
osv
openexr vulnerabilities
2022-09-20 12:52:57
openexr vulnerabilities
2021-06-22 11:09:05
openexr vulnerabilities
2021-06-22 11:46:27
cloudfoundry
cloudfoundry
USN-4996-1: OpenEXR vulnerabilities | Cloud Foundry
2021-07-08 00:00:00
USN-5150-1: OpenEXR vulnerability | Cloud Foundry
2022-01-20 00:00:00
ubuntu
ubuntu
OpenEXR vulnerabilities
2021-06-22 00:00:00
OpenEXR vulnerabilities
2021-06-22 00:00:00
OpenEXR vulnerability
2021-11-17 00:00:00
debian
debian
[SECURITY] [DSA 5299-1] openexr security update
2022-12-10 16:45:25
[SECURITY] [DLA 2701-1] openexr security update
2021-07-03 18:16:17
[SECURITY] [DLA 3236-1] openexr security update
2022-12-11 23:53:11
veracode
veracode
Denial Of Service (DoS)
2021-07-11 10:12:19
Denial Of Service (DoS)
2021-07-10 18:13:05
Denial Of Service (DoS)
2021-11-23 02:50:01
debiancve
debiancve
cvelist
cvelist
cve
cve
prion
prion
Integer overflow
2021-06-08 12:15:00
Null pointer dereference
2021-04-01 14:15:00
Integer overflow
2021-06-08 12:15:00
alpinelinux
alpinelinux
ubuntucve
ubuntucve
suse
suse
Security update for openexr (moderate)
2021-12-01 00:00:00
Security update for openexr (moderate)
2021-12-06 00:00:00
Security update for openexr (important)
2021-05-05 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: openexr-3.1.4-1.fc35
2022-03-18 20:07:24
[SECURITY] Fedora 36 Update: openexr-3.1.4-1.fc36
2022-03-26 15:46:43
[SECURITY] Fedora 34 Update: mingw-openexr-2.5.5-4.fc34
2022-02-06 02:03:01
mageia
mageia
Updated openexr packages fix security vulnerability
2021-11-25 16:06:13
Updated openexr packages fix security vulnerabilities
2021-07-10 15:56:54
gentoo
gentoo
OpenEXR: Multiple Vulnerabilities
2022-10-31 00:00:00
OpenEXR: Multiple vulnerabilities
2021-07-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2248
2023-10-17 12:58:34
Advisory ROSA-SA-2023-2247
2023-10-17 12:52:56
redhatcve
redhatcve
cnvd
cnvd
OpenEXR DwaCompressor Heap Buffer Overflow Vulnerability
2021-05-07 00:00:00
OpenEXR DwaCompressor Heap Buffer Overflow Vulnerability (CNVD-2021-53912)
2021-05-07 00:00:00
archlinux
archlinux
[ASA-202107-14] openexr: arbitrary code execution
2021-07-06 00:00:00
amazon
amazon
Medium: OpenEXR
2023-06-05 16:39:00
freebsd
freebsd
openexr, ilmbase -- security fixes related to reading corrupted input files
2021-02-12 00:00:00