rpm package
suse/openexr&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4
pkg:rpm/suse/openexr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4
Vulnerabilities (20)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-20304 | — | < 2.1.0-6.37.1 | 2.1.0-6.37.1 | Aug 23, 2022 | A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20298 | — | < 2.1.0-6.37.1 | 2.1.0-6.37.1 | Aug 23, 2022 | A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20299 | — | < 2.1.0-6.37.1 | 2.1.0-6.37.1 | Mar 16, 2022 | A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20303 | — | < 2.1.0-6.37.1 | 2.1.0-6.37.1 | Mar 4, 2022 | A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to applicatio | ||
| CVE-2021-20302 | — | < 2.1.0-6.37.1 | 2.1.0-6.37.1 | Mar 4, 2022 | A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-20300 | — | < 2.1.0-6.37.1 | 2.1.0-6.37.1 | Mar 4, 2022 | A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability. | ||
| CVE-2021-3605 | — | < 2.1.0-6.34.1 | 2.1.0-6.34.1 | Aug 25, 2021 | There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability. | ||
| CVE-2021-3598 | — | < 2.1.0-6.34.1 | 2.1.0-6.34.1 | Jul 6, 2021 | There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability | ||
| CVE-2021-3479 | — | < 2.1.0-6.34.1 | 2.1.0-6.34.1 | Mar 31, 2021 | There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability. | ||
| CVE-2021-3476 | — | < 2.1.0-6.37.1 | 2.1.0-6.37.1 | Mar 30, 2021 | A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability. | ||
| CVE-2020-11758 | — | < 2.1.0-6.20.1 | 2.1.0-6.20.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. | ||
| CVE-2020-11760 | — | < 2.1.0-6.20.1 | 2.1.0-6.20.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. | ||
| CVE-2020-11763 | — | < 2.1.0-6.20.1 | 2.1.0-6.20.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp. | ||
| CVE-2020-11764 | — | < 2.1.0-6.20.1 | 2.1.0-6.20.1 | Apr 14, 2020 | An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp. | ||
| CVE-2018-18444 | — | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | Oct 17, 2018 | makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact. | ||
| CVE-2017-14988 | Med | 5.5 | < 2.1.0-6.13.1 | 2.1.0-6.13.1 | Oct 3, 2017 | Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third | |
| CVE-2017-9115 | Hig | 8.8 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code. | |
| CVE-2017-9113 | Hig | 8.8 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code. | |
| CVE-2017-9112 | Med | 6.5 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash. | |
| CVE-2017-9111 | Hig | 8.8 | < 2.1.0-6.10.1 | 2.1.0-6.10.1 | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code. |
- CVE-2021-20304Aug 23, 2022affected < 2.1.0-6.37.1fixed 2.1.0-6.37.1
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.
- CVE-2021-20298Aug 23, 2022affected < 2.1.0-6.37.1fixed 2.1.0-6.37.1
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability.
- CVE-2021-20299Mar 16, 2022affected < 2.1.0-6.37.1fixed 2.1.0-6.37.1
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.
- CVE-2021-20303Mar 4, 2022affected < 2.1.0-6.37.1fixed 2.1.0-6.37.1
A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to applicatio
- CVE-2021-20302Mar 4, 2022affected < 2.1.0-6.37.1fixed 2.1.0-6.37.1
A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.
- CVE-2021-20300Mar 4, 2022affected < 2.1.0-6.37.1fixed 2.1.0-6.37.1
A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.
- CVE-2021-3605Aug 25, 2021affected < 2.1.0-6.34.1fixed 2.1.0-6.34.1
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.
- CVE-2021-3598Jul 6, 2021affected < 2.1.0-6.34.1fixed 2.1.0-6.34.1
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability
- CVE-2021-3479Mar 31, 2021affected < 2.1.0-6.34.1fixed 2.1.0-6.34.1
There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability.
- CVE-2021-3476Mar 30, 2021affected < 2.1.0-6.37.1fixed 2.1.0-6.37.1
A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.
- CVE-2020-11758Apr 14, 2020affected < 2.1.0-6.20.1fixed 2.1.0-6.20.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.
- CVE-2020-11760Apr 14, 2020affected < 2.1.0-6.20.1fixed 2.1.0-6.20.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.
- CVE-2020-11763Apr 14, 2020affected < 2.1.0-6.20.1fixed 2.1.0-6.20.1
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.
- CVE-2020-11764Apr 14, 2020affected < 2.1.0-6.20.1fixed 2.1.0-6.20.1
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
- CVE-2018-18444Oct 17, 2018affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact.
- affected < 2.1.0-6.13.1fixed 2.1.0-6.13.1
Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash.
- affected < 2.1.0-6.10.1fixed 2.1.0-6.10.1
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.