rpm package
suse/openexr&distro=SUSE Linux Enterprise Desktop 12 SP4
pkg:rpm/suse/openexr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-18444 | — | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | Oct 17, 2018 | makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact. | ||
| CVE-2017-14988 | Med | 5.5 | < 2.1.0-6.13.1 | 2.1.0-6.13.1 | Oct 3, 2017 | Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third | |
| CVE-2017-9115 | Hig | 8.8 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code. | |
| CVE-2017-9113 | Hig | 8.8 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code. | |
| CVE-2017-9112 | Med | 6.5 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash. | |
| CVE-2017-9111 | Hig | 8.8 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code. |
- CVE-2018-18444Oct 17, 2018affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact.
- affected < 2.1.0-6.13.1fixed 2.1.0-6.13.1
Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash.
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.