Lucene search
Ubuntu.comUB:CVE-2022-41977HistoryDec 22, 2022 - 12:00 a.m.
CVE-2022-41977
2022-12-2200:00:00
ubuntu.com
ubuntu.com
17
openimageio
tiff file
vulnerability
information disclosure
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
26.3%
An out of bounds read vulnerability exists in the way OpenImageIO version
v2.3.19.0 processes string fields in TIFF image files. A specially-crafted
TIFF file can lead to information disclosure. An attacker can provide a
malicious file to trigger this vulnerability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | openimageio | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | openimageio | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | openimageio | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | openimageio | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | openimageio | < any | UNKNOWN |
Related
debiancve
debiancve
CVE-2022-41977
2022-12-23 23:03:51
osv
osv
CVE-2022-41977
2022-12-22 22:15:15
OpenImageIO-2.4.5.0-1.1 on GA media
2024-06-15 00:00:00
openimageio - security update
2023-04-05 00:00:00
cvelist
cvelist
CVE-2022-41977
2022-12-23 23:03:51
talos
talos
OpenImageIO TIFF file string field information disclosure vulnerability
2022-12-22 00:00:00
cnvd
cnvd
OpenImageIO Out-of-Bounds Read Vulnerability
2022-12-23 00:00:00
prion
prion
Design/Logic Flaw
2022-12-22 22:15:00
cve
cve
CVE-2022-41977
2022-12-23 23:03:51
nvd
nvd
CVE-2022-41977
2022-12-22 22:15:15
fedora
fedora
[SECURITY] Fedora 36 Update: OpenImageIO-2.3.21.0-1.fc36
2022-12-31 01:17:01
openvas
openvas
Fedora: Security Advisory for OpenImageIO (FEDORA-2022-e63bc3eca2)
2022-12-31 00:00:00
Debian: Security Advisory (DLA-3382-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5384-1)
2023-04-11 00:00:00
nessus
nessus
Fedora 36 : OpenImageIO (2022-e63bc3eca2)
2022-12-31 00:00:00
Debian DLA-3382-1 : openimageio - LTS security update
2023-04-10 00:00:00
Debian DSA-5384-1 : openimageio - security update
2023-04-11 00:00:00
debian
debian
[SECURITY] [DLA 3382-1] openimageio security update
2023-04-04 23:34:51
[SECURITY] [DSA 5384-1] openimageio security update
2023-04-10 09:18:20
talosblog
talosblog
mageia
mageia
Updated openimageio packages fix security vulnerability
2023-04-24 03:20:26
gentoo
gentoo
OpenImageIO: Multiple Vulnerabilities
2023-05-30 00:00:00
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
26.3%
Related for UB:CVE-2022-41977