Advisory ROSA-SA-2023-2248

software: openexr 2.5.8 OS: ROSA-CHROME packageevrstring: openexr-2.5.8-1.src.rpm CVE-ID: CVE-2021-3477 BDU-ID: 2021-01977 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the DeepTiledInputFile::initialize function src/lib/OpenEXR/ImfDeepTiledInputFile.cpp of the OpenEXR library is related to...

IlmImf Decompression Buffer Overflow DoS

The vulnerability of the decompression function in the Dwa library of the OpenEXR image storage software for images with wide dynamic ranges is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause service interruptions...

OpenEXR getChunkOffsetTableSize Buffer Overflow DoS

The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenEXR DeepScanLineInputFile Memory Leak DoS

The vulnerability of the DeepScanLineInputFile function in software for storing images in OpenEXR format with a wide dynamic range of brightness levels is related to the use of memory areas after they are freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenEXR ImfOptimizedPixelReading Buffer Overflow DoS

The vulnerability of the ImfOptimizedPixelReading.h library, which is used in software for storing images with wide dynamic range brightness in OpenEXR format, relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service...

OpenEXR storeSSE Confidential Information DoS

Vulnerability of the storeSSE function in software for storing images with wide dynamic range brightness in OpenEXR format. Exploitation of this vulnerability allows a remote attacker to access confidential information or cause service failures...