CVE-2023-5841
OpenEXR Heap Overflow in Scanline Deep Data Parsing
Résumé
OpenEXR Heap Overflow in Scanline Deep Data Parsing
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-5841 openexr
- Ubuntu UBUNTU-CVE-2023-5841 openexr
Références
- advisory github.com
- advisory nvd.nist.gov
- web seclists.org
- web seclists.org
- web seclists.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web takeonme.org