CVE-2020-11765

An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Class...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2020-11765 openexr 修正版: 2.5.3-2

参照URL

advisory lists.opensuse.org
advisory github.com
advisory github.com
advisory lists.debian.org
advisory security.gentoo.org
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory usn.ubuntu.com
advisory debian.org
report bugs.chromium.org
web lists.fedoraproject.org