rpm package
suse/openexr&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1
pkg:rpm/suse/openexr&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1
Vulnerabilities (17)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-16589 | — | < 2.2.1-3.21.1 | 2.2.1-3.21.1 | Dec 9, 2020 | A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file. | ||
| CVE-2020-16588 | — | < 2.2.1-3.21.1 | 2.2.1-3.21.1 | Dec 9, 2020 | A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file. | ||
| CVE-2020-16587 | — | < 2.2.1-3.21.1 | 2.2.1-3.21.1 | Dec 9, 2020 | A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file. | ||
| CVE-2020-15304 | — | < 2.2.1-3.18.1 | 2.2.1-3.18.1 | Jun 26, 2020 | An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference. | ||
| CVE-2020-15305 | — | < 2.2.1-3.18.1 | 2.2.1-3.18.1 | Jun 26, 2020 | An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp. | ||
| CVE-2020-15306 | — | < 2.2.1-3.18.1 | 2.2.1-3.18.1 | Jun 26, 2020 | An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp. | ||
| CVE-2020-11758 | — | < 2.2.1-3.14.1 | 2.2.1-3.14.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. | ||
| CVE-2020-11760 | — | < 2.2.1-3.14.1 | 2.2.1-3.14.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. | ||
| CVE-2020-11761 | — | < 2.2.1-3.14.1 | 2.2.1-3.14.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp. | ||
| CVE-2020-11762 | — | < 2.2.1-3.14.1 | 2.2.1-3.14.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case. | ||
| CVE-2020-11763 | — | < 2.2.1-3.14.1 | 2.2.1-3.14.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp. | ||
| CVE-2020-11764 | — | < 2.2.1-3.14.1 | 2.2.1-3.14.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp. | ||
| CVE-2020-11765 | — | < 2.2.1-3.14.1 | 2.2.1-3.14.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read. | ||
| CVE-2017-14988 | Med | 5.5 | < 2.2.1-3.9.2 | 2.2.1-3.9.2 | Oct 3, 2017 | Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third | |
| CVE-2017-9115 | Hig | 8.8 | < 2.2.1-3.6.1 | 2.2.1-3.6.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code. | |
| CVE-2017-9113 | Hig | 8.8 | < 2.2.1-3.6.1 | 2.2.1-3.6.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code. | |
| CVE-2017-9111 | Hig | 8.8 | < 2.2.1-3.6.1 | 2.2.1-3.6.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code. |
- CVE-2020-16589Dec 9, 2020affected < 2.2.1-3.21.1fixed 2.2.1-3.21.1
A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.
- CVE-2020-16588Dec 9, 2020affected < 2.2.1-3.21.1fixed 2.2.1-3.21.1
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.
- CVE-2020-16587Dec 9, 2020affected < 2.2.1-3.21.1fixed 2.2.1-3.21.1
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.
- CVE-2020-15304Jun 26, 2020affected < 2.2.1-3.18.1fixed 2.2.1-3.18.1
An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference.
- CVE-2020-15305Jun 26, 2020affected < 2.2.1-3.18.1fixed 2.2.1-3.18.1
An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp.
- CVE-2020-15306Jun 26, 2020affected < 2.2.1-3.18.1fixed 2.2.1-3.18.1
An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp.
- CVE-2020-11758Apr 14, 2020affected < 2.2.1-3.14.1fixed 2.2.1-3.14.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.
- CVE-2020-11760Apr 14, 2020affected < 2.2.1-3.14.1fixed 2.2.1-3.14.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.
- CVE-2020-11761Apr 14, 2020affected < 2.2.1-3.14.1fixed 2.2.1-3.14.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.
- CVE-2020-11762Apr 14, 2020affected < 2.2.1-3.14.1fixed 2.2.1-3.14.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.
- CVE-2020-11763Apr 14, 2020affected < 2.2.1-3.14.1fixed 2.2.1-3.14.1
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.
- CVE-2020-11764Apr 14, 2020affected < 2.2.1-3.14.1fixed 2.2.1-3.14.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
- CVE-2020-11765Apr 14, 2020affected < 2.2.1-3.14.1fixed 2.2.1-3.14.1
An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.
- affected < 2.2.1-3.9.2fixed 2.2.1-3.9.2
Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third
- affected < 2.2.1-3.6.1fixed 2.2.1-3.6.1
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
- affected < 2.2.1-3.6.1fixed 2.2.1-3.6.1
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
- affected < 2.2.1-3.6.1fixed 2.2.1-3.6.1
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.