Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-11759
HistoryApr 14, 2020 - 12:00 a.m.

CVE-2020-11759

2020-04-1400:00:00
ubuntu.com
ubuntu.com
11

0.001 Low

EPSS

Percentile

46.3%

An issue was discovered in OpenEXR before 2.4.1. Because of integer
overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and
readSampleCountForLineBlock, an attacker can write to an out-of-bounds
pointer.

Bugs

Notes

Author Note
mdeslaur can’t locate changes to readSampleCountForLineBlock, need to check if list of commits is complete
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchopenexr< 2.2.0-11.1ubuntu1.2UNKNOWN
ubuntu19.10noarchopenexr< 2.2.1-4.1ubuntu1.1UNKNOWN
ubuntu20.04noarchopenexr< 2.3.0-6ubuntu0.1UNKNOWN
ubuntu16.04noarchopenexr< 2.2.0-10ubuntu2.2UNKNOWN