CVE-2023-5841
OpenEXR Heap Overflow in Scanline Deep Data Parsing
概要
OpenEXR Heap Overflow in Scanline Deep Data Parsing
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-5841 openexr
- Ubuntu UBUNTU-CVE-2023-5841 openexr
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web seclists.org
- web seclists.org
- web seclists.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web takeonme.org