openSUSE 15 Security Update : openexr (openSUSE-SU-2021:3844-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3844-1 advisory. - In ImfChromaticities.cpp routine RGBtoXYZ, there are some division operations such as float Z = 1 - chroma.white.x - chroma.white.y Y /...

SUSE-SU-2021:14846-1 Security update for OpenEXR

This update for OpenEXR fixes the following issues: - CVE-2021-20298: Fixed out-of-memory in B44Compressor bsc1188460. - CVE-2021-20300: Fixed integer-overflow in Imf25:hufUncompress bsc1188458. - CVE-2021-20303: Fixed heap-buffer-overflow in Imf25::copyIntoFrameBuffe bsc1188457. - CVE-2021-20304...

OPENSUSE-SU-2021:3844-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3941: Fixed divide-by-zero in Imf31:RGBtoXYZ bsc1192556. - CVE-2021-3933: Fixed integer-overflow in Imf31:bytesPerDeepLineTable bsc1192498...

SUSE-SU-2021:3844-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3941: Fixed divide-by-zero in Imf31:RGBtoXYZ bsc1192556. - CVE-2021-3933: Fixed integer-overflow in Imf31:bytesPerDeepLineTable bsc1192498...

SUSE-SU-2021:3843-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3477: Fixed Heap-buffer-overflow in Imf25::DeepTiledInputFile::readPixelSampleCounts bsc1184353. - CVE-2021-3941: Fixed divide-by-zero in Imf31:RGBtoXYZ bsc1192556. - CVE-2021-3933: Fixed integer-overflow in Imf31:bytesPerDeepLineTabl...

Security update for openexr (moderate)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:3844-1 Rating: moderate References: 1192498 1192556 Cross-References: CVE-2021-3933 CVE-2021-3941 CVSS scores: CVE-2021-3933 SUSE: 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2021-3941 SUSE: 5.5...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5275682339422208 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

OpenEXR -- Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Cary Phillips reports: OpenEXR Version 3.1.4 is a patch release that ... addresses one public security vulnerability: CVE-2021-45942 Heap-buffer-overflow in Imf31::LineCompositeTask::execute and several specific OSS-fuzz issues...

Updated openexr packages fix security vulnerability

Integer-overflow in Imf31::bytesPerDeepLineTable. CVE-2021-3933 Divide-by-zero in Imf31::RGBtoXYZ. CVE-2021-3941...

MGASA-2021-0524 Updated openexr packages fix security vulnerability

Integer-overflow in Imf31::bytesPerDeepLineTable. CVE-2021-3933 Divide-by-zero in Imf31::RGBtoXYZ. CVE-2021-3941...

Denial Of Service (DoS)

openexr:bionic is vulnerable to denial of service. The vulnerability exists in RGBtoXYZ function of ImfChromaticities.cpp due to the divisor is not checked for a 0 value which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

openexr:bionic is vulnerable to denial of service. The vulnerability exists due to incorrectly handled EXR image files which allows an attacker to crash the application via malicious input...

Ubuntu 16.04 ESM / 18.04 LTS : OpenEXR vulnerability (USN-5150-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5150-1 advisory. It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash. Tenable has...

Ubuntu: Security Advisory (USN-5150-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5150-1: OpenEXR vulnerability

It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash...

USN-5150-1 openexr vulnerability

It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash...

ILM OpenEXR 数字错误漏洞

ILM OpenEXR is an image file format from Industrial Light and Magic ILM for high dynamic range HDR images. A security vulnerability exists in ILM OpenEXR that stems from OpenEXR incorrectly processing certain EXR image files. An attacker could exploit this issue to cause a crash...

Ubuntu: Security Advisory (USN-5144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ILM OpenEXR 输入验证错误漏洞

ILM OpenEXR is an image file format from Industrial Light and Magic ILM for high dynamic range HDR images. A security vulnerability exists in ILM OpenEXR, which can be exploited by an attacker to cause a program to crash or execute arbitrary code via a carefully constructed EXR file...

Ubuntu 16.04 ESM / 18.04 LTS : OpenEXR vulnerability (USN-5144-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5144-1 advisory. It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash or execute...