Summary
Brandon Perry discovered that OpenEXR incorrectly handled certain malformed
EXR image files. If a user were tricked into opening a crafted EXR image
file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code. This issue only applied to Ubuntu 20.04 LTS.
(CVE-2017-9111, CVE-2017-9113, CVE-2017-9115)
Tan Jie discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code. This issue only applied to Ubuntu 20.04 LTS.
(CVE-2018-18444)
Samuel Groß discovered that OpenEXR incorrectly handled certain malformed
EXR image files. If a user were tricked into opening a crafted EXR image
file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code. (CVE-2020-11758, CVE-2020-11759, CVE-2020-11760,
CVE-2020-11761, CVE-2020-11762, CVE-2020-11763, CVE-2020-11764)
It was discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image
file, a remote attacker could cause a denial of service. (CVE-2020-11765)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | openexr | 2.2.0-10ubuntu2.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | openexr | 2.2.0-11.1ubuntu1.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | openexr | 2.3.0-6ubuntu0.1 |
Vulnerabilities 12
-
High 8.8
OpenEXR invalid write
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.
-
Unscored —
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the app…
-
Unscored —
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash …
-
Unscored —
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possi…
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDee…
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompre…
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demons…
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress …
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated …
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
-
Unscored —
An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by D…
References
-
report
https://ubuntu.com/security/CVE-2017-9111
-
report
https://ubuntu.com/security/CVE-2017-9113
-
report
https://ubuntu.com/security/CVE-2017-9115
-
report
https://ubuntu.com/security/CVE-2018-18444
-
report
https://ubuntu.com/security/CVE-2020-11758
-
report
https://ubuntu.com/security/CVE-2020-11759
-
report
https://ubuntu.com/security/CVE-2020-11760
-
report
https://ubuntu.com/security/CVE-2020-11761
-
report
https://ubuntu.com/security/CVE-2020-11762
-
report
https://ubuntu.com/security/CVE-2020-11763
-
report
https://ubuntu.com/security/CVE-2020-11764
-
report
https://ubuntu.com/security/CVE-2020-11765