rpm package
opensuse/openexr&distro=openSUSE Leap 15.2
pkg:rpm/opensuse/openexr&distro=openSUSE%20Leap%2015.2
Vulnerabilities (24)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-20304 | — | < 2.2.1-lp152.7.20.1 | 2.2.1-lp152.7.20.1 | Aug 23, 2022 | A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20298 | — | < 2.2.1-lp152.7.20.1 | 2.2.1-lp152.7.20.1 | Aug 23, 2022 | A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-3941 | — | < 2.2.1-lp152.7.23.1 | 2.2.1-lp152.7.23.1 | Mar 25, 2022 | In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigg | ||
| CVE-2021-3933 | — | < 2.2.1-lp152.7.23.1 | 2.2.1-lp152.7.23.1 | Mar 25, 2022 | An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths. | ||
| CVE-2021-20299 | — | < 2.2.1-lp152.7.20.1 | 2.2.1-lp152.7.20.1 | Mar 16, 2022 | A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20303 | — | < 2.2.1-lp152.7.20.1 | 2.2.1-lp152.7.20.1 | Mar 4, 2022 | A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to applicatio | ||
| CVE-2021-20302 | — | < 2.2.1-lp152.7.20.1 | 2.2.1-lp152.7.20.1 | Mar 4, 2022 | A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20300 | — | < 2.2.1-lp152.7.20.1 | 2.2.1-lp152.7.20.1 | Mar 4, 2022 | A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-3605 | — | < 2.2.1-lp152.7.17.1 | 2.2.1-lp152.7.17.1 | Aug 25, 2021 | There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability. | ||
| CVE-2021-3598 | — | < 2.2.1-lp152.7.17.1 | 2.2.1-lp152.7.17.1 | Jul 6, 2021 | There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability | ||
| CVE-2021-26260 | — | < 2.2.1-lp152.7.14.1 | 2.2.1-lp152.7.14.1 | Jun 8, 2021 | An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215. | ||
| CVE-2021-23215 | — | < 2.2.1-lp152.7.14.1 | 2.2.1-lp152.7.14.1 | Jun 8, 2021 | An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. | ||
| CVE-2021-20296 | — | < 2.2.1-lp152.7.14.1 | 2.2.1-lp152.7.14.1 | Apr 1, 2021 | A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to | ||
| CVE-2021-3479 | — | < 2.2.1-lp152.7.14.1 | 2.2.1-lp152.7.14.1 | Mar 31, 2021 | There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability. | ||
| CVE-2021-3477 | — | < 2.2.1-lp152.7.14.1 | 2.2.1-lp152.7.14.1 | Mar 31, 2021 | There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, subsequently leading to an out-of-bounds read. The greatest risk of this fl | ||
| CVE-2021-3476 | — | < 2.2.1-lp152.7.11.1 | 2.2.1-lp152.7.11.1 | Mar 30, 2021 | A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability. | ||
| CVE-2021-3475 | — | < 2.2.1-lp152.7.11.1 | 2.2.1-lp152.7.11.1 | Mar 30, 2021 | There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability. | ||
| CVE-2021-3474 | — | < 2.2.1-lp152.7.11.1 | 2.2.1-lp152.7.11.1 | Mar 30, 2021 | There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability. | ||
| CVE-2020-16589 | — | < 2.2.1-lp152.7.8.1 | 2.2.1-lp152.7.8.1 | Dec 9, 2020 | A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file. | ||
| CVE-2020-16588 | — | < 2.2.1-lp152.7.8.1 | 2.2.1-lp152.7.8.1 | Dec 9, 2020 | A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file. |
- CVE-2021-20304Aug 23, 2022affected < 2.2.1-lp152.7.20.1fixed 2.2.1-lp152.7.20.1
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.
- CVE-2021-20298Aug 23, 2022affected < 2.2.1-lp152.7.20.1fixed 2.2.1-lp152.7.20.1
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability.
- CVE-2021-3941Mar 25, 2022affected < 2.2.1-lp152.7.23.1fixed 2.2.1-lp152.7.23.1
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigg
- CVE-2021-3933Mar 25, 2022affected < 2.2.1-lp152.7.23.1fixed 2.2.1-lp152.7.23.1
An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths.
- CVE-2021-20299Mar 16, 2022affected < 2.2.1-lp152.7.20.1fixed 2.2.1-lp152.7.20.1
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.
- CVE-2021-20303Mar 4, 2022affected < 2.2.1-lp152.7.20.1fixed 2.2.1-lp152.7.20.1
A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to applicatio
- CVE-2021-20302Mar 4, 2022affected < 2.2.1-lp152.7.20.1fixed 2.2.1-lp152.7.20.1
A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.
- CVE-2021-20300Mar 4, 2022affected < 2.2.1-lp152.7.20.1fixed 2.2.1-lp152.7.20.1
A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.
- CVE-2021-3605Aug 25, 2021affected < 2.2.1-lp152.7.17.1fixed 2.2.1-lp152.7.17.1
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.
- CVE-2021-3598Jul 6, 2021affected < 2.2.1-lp152.7.17.1fixed 2.2.1-lp152.7.17.1
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability
- CVE-2021-26260Jun 8, 2021affected < 2.2.1-lp152.7.14.1fixed 2.2.1-lp152.7.14.1
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215.
- CVE-2021-23215Jun 8, 2021affected < 2.2.1-lp152.7.14.1fixed 2.2.1-lp152.7.14.1
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.
- CVE-2021-20296Apr 1, 2021affected < 2.2.1-lp152.7.14.1fixed 2.2.1-lp152.7.14.1
A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to
- CVE-2021-3479Mar 31, 2021affected < 2.2.1-lp152.7.14.1fixed 2.2.1-lp152.7.14.1
There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability.
- CVE-2021-3477Mar 31, 2021affected < 2.2.1-lp152.7.14.1fixed 2.2.1-lp152.7.14.1
There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, subsequently leading to an out-of-bounds read. The greatest risk of this fl
- CVE-2021-3476Mar 30, 2021affected < 2.2.1-lp152.7.11.1fixed 2.2.1-lp152.7.11.1
A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.
- CVE-2021-3475Mar 30, 2021affected < 2.2.1-lp152.7.11.1fixed 2.2.1-lp152.7.11.1
There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability.
- CVE-2021-3474Mar 30, 2021affected < 2.2.1-lp152.7.11.1fixed 2.2.1-lp152.7.11.1
There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability.
- CVE-2020-16589Dec 9, 2020affected < 2.2.1-lp152.7.8.1fixed 2.2.1-lp152.7.8.1
A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.
- CVE-2020-16588Dec 9, 2020affected < 2.2.1-lp152.7.8.1fixed 2.2.1-lp152.7.8.1
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.
Page 1 of 2