Summary
It was discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-12596)
Brandon Perry discovered that OpenEXR incorrectly handled certain malformed
EXR image files. If a user were tricked into opening a crafted EXR image
file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.
(CVE-2017-9110, CVE-2017-9112, CVE-2017-9116)
Brandon Perry discovered that OpenEXR incorrectly handled certain malformed
EXR image files. If a user were tricked into opening a crafted EXR image
file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code. (CVE-2017-9111, CVE-2017-9113, CVE-2017-9115)
Tan Jie discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code. (CVE-2018-18444)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | openexr | 2.2.0-10ubuntu2.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | openexr | 2.2.0-11.1ubuntu1.1 |
Vulnerabilities 8
-
High 8.8
OpenEXR invalid write
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.
-
Medium 6.5
OpenEXR invalid read
In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash.
-
Unscored —
In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp d…
-
Unscored —
In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to cras…
-
Unscored —
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the app…
-
Unscored —
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash …
-
Unscored —
In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to cra…
-
Unscored —
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possi…
References
-
report
https://ubuntu.com/security/CVE-2017-9110
-
report
https://ubuntu.com/security/CVE-2017-9111
-
report
https://ubuntu.com/security/CVE-2017-9112
-
report
https://ubuntu.com/security/CVE-2017-9113
-
report
https://ubuntu.com/security/CVE-2017-9115
-
report
https://ubuntu.com/security/CVE-2017-9116
-
report
https://ubuntu.com/security/CVE-2017-12596
-
report
https://ubuntu.com/security/CVE-2018-18444