2475 matches found
Denial Of Service (DoS)
openexr is vulnerable to denial of service DoS. The vulnerability exists in refill function in ImfFastHuf.cpp due to an invalid read of size, allowing a malicious user to crash the application...
Denial Of Service (DoS)
OpenEXR is vulnerabile to denial of service and arbitrary code execution. The vulnerability exist when an invalid write of size 1 in the bufferedReadPixels function could cause the application to crash or execute arbitrary code...
PT-2020-6398 · Openexr · Openexr
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.1 Description: A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR. This issue allows an attacker to execute arbitrary code with the permissions of the user running the application...
PT-2020-5886 · Openexr +4 · Openexr +4
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to the implementation of the scanline input file functionality in the OpenEXR library, specifically in the ImfScanLineInputFile.cpp file. It involves an uncontrolled...
PT-2020-5887 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to a flaw in OpenEXR's deep tile sample size calculations, which can lead to an integer overflow and subsequently an out-of-bounds read when a crafted file is processed...
Huawei EulerOS: Security Advisory for OpenEXR (EulerOS-SA-2020-2261)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2020-2261)
According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by...
Amazon Linux 2 : OpenEXR (ALAS-2020-1499)
The version of OpenEXR installed on the remote host is prior to 1.7.1-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1499 advisory. An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as...
PT-2020-6260 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR version 2.3.0 Description: A head-based buffer overflow exists in the writeTileData function of OpenEXR that can cause a denial of service via a crafted EXR file. This issue is related to writing beyond the boundaries of a buffer...
PT-2020-6259 · Academy Software Foundation +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: Academy Software Foundation OpenEXR version 2.3.0 Description: A Null Pointer Deference issue exists in the generatePreview function in makePreview.cpp that can cause a denial of service via a crafted EXR file. This issue is related to errors...
Medium: OpenEXR
Issue Overview: An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp. CVE-2020-11761 An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and...
PT-2020-6473 · Academy Software Foundation +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: Academy Software Foundation OpenEXR version 2.3.0 Description: A heap-based buffer overflow issue exists in the chunkOffsetReconstruction function within the ImfMultiPartInputFile.cpp file. This can cause a denial of service when a crafted EX...
Scientific Linux Security Update : OpenEXR on SL7.x x86_64 (20201001)
Security Fixes : - OpenEXR: out-of-bounds read during Huffman uncompression CVE-2020-11761 - OpenEXR: std::vector out-of-bounds read and write in ImfTileOffsets.cpp CVE-2020-11763 - OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp CVE-2020-11764 C Tenable Network...
OpenEXR security update
CentOS Errata and Security Advisory CESA-2020:4039 An update for OpenEXR is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CentOS 7 : OpenEXR (RHSA-2020:4039)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4039 advisory. - An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refi...
Oracle Linux 7 : OpenEXR (ELSA-2020-4039)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4039 advisory. - fix CVE-2020-11764 1833552 - fix CVE-2020-11763 1833566 Tenable has extracted the preceding description block directly from the Oracle Linux security...
OpenEXR security update
1.7.1-8 - fix CVE-2020-11764 1833552 - fix CVE-2020-11763 1833566 - fix CVE-2020-11761 1834461...
PT-2020-5888 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to an integer overflow in the B44 compression function of the OpenEXR library. This can be exploited by a remote attacker to cause a denial of service by opening specially...