3291 matches found
RHEL 8 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Out-of-bounds write in makeMultiView.cpp CVE-2018-18444 - OpenEXR 2.3.0 has a memory leak in...
RHEL 6 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Out-of-bounds write in the = operator function CVE-2017-9115 - In OpenEXR 2.2.0, a crafted image...
OESA-2024-1586 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the...
OESA-2024-1585 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the...
RHEL 9 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - OpenEXR: heap-based buffer overflow in Imf31:LineCompositeTask:execute CVE-2021-45942 Note that Nessus has not test...
RHEL 7 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Out-of-bounds write in the = operator function CVE-2017-9115 - In OpenEXR 2.2.0, a crafted image...
RHEL 6 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Heap-buffer-overflow in Imf25::copyIntoFrameBuffer CVE-2021-23169 - OpenEXR: Heap Overflow in...
RHEL 8 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Out-of-bounds write in makeMultiView.cpp CVE-2018-18444 - OpenEXR 2.3.0 has a memory leak in...
OESA-2024-1549 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the...
Fedora 40 : openexr (2024-55247f3a4f)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-55247f3a4f advisory. Automatic update for openexr-3.1.10-5.fc40. Changelog Mon Feb 5 2024 Benjamin A. Beasley - 3.1.10-5 - Backport proposed fix for CVE-2023-5841 to 3.1.10 fix...
Denial Of Service (DoS)
OpenEXR is vulnerable to a Denial of Service DoS.The vulnerability is due to improper input validation within the convert function in exrmultipart.cpp, which results in Denial of Service if an attacker can pass a crafted input to the function...
OpenEXR suffers from an unspecified vulnerability (CNVD-2025-24802)
OpenEXR is an open standard for high dynamic range image HDR file formats. A security vulnerability exists in OpenEXR version v.3.2.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service DoS via the conversion function in exrmultipart.cpp...
CVE-2024-31047
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...
DEBIAN-CVE-2024-31047
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...
UBUNTU-CVE-2024-31047
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...
CVE-2024-31047
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...
CVE-2024-31047: Integer Overflow or Wraparound
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...
CVE-2024-31047
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...
PT-2024-23739
Name of the Vulnerable Software and Affected Versions Academy Software Foundation openexr versions 3.2.3 and earlier Description An issue in the convert function of exrmultipart.cpp allows a local attacker to cause a denial of service DoS. Recommendations For versions 3.2.3 and earlier, consider...
