← 戻る
UBUNTU-CVE-2022-34300
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
AI要約 snake-internal / snake-template-v1
In tinyexrという製品で、UBUNTU-CVE-2022-34300 という番号がついた弱点 (脆弱性) が見つかりました。
重要度は「情報」。深刻度は低いか、まだ評価されていません。
あなた自身の対応としては、使っている製品やソフトを最新版に更新するのがいちばんの対策です。心配なら、システム担当者や製品の公式サイトで「In tinyexr UBUNTU-CVE-2022-34300」を検索してください。
UBUNTU-CVE-2022-34300 (In tinyexr)。重要度: 情報。
対応方針:
1. ベンダー公式アドバイザリで影響バージョン・修正版を確認
2. 該当バージョンが本番で稼働中なら、メンテ計画 (緊急度はKEV/CVSSで判断)
3. パッチ未提供時は WAF ルール・該当機能の無効化等で暫定回避
4. ログ・SIEMで該当CVEのIOC/PoCシグネチャを監視
詳細PoCや修正コミットは、当ページの『参照URL』および MITRE / NVD を参照してください。
❓ 何が問題か
In tinyexr の弱点 (UBUNTU-CVE-2022-34300)。深刻なソフトウェア欠陥が見つかっています。
📍 影響範囲
In tinyexr の対象バージョン (各ベンダーアドバイザリで確認)。本番環境で稼働中であれば直ちに影響範囲を確認してください。
🔥 重要度
重要度: 情報。深刻度は低いか、まだ評価されていません。
🔧 修正方法
ベンダー公式アドバイザリで提示された修正版に更新してください。
🛡️ 暫定回避
修正版がまだ提供されていない場合は、影響機能の無効化・WAFルール・ネットワークACLでの遮断・該当バージョンの隔離を検討してください。
🔍 検知方法
バージョン情報の確認、SBOMでの依存関係スキャン、SIEMでの該当CVEに関するIOC・PoCシグネチャ監視を実施してください。
影響パッケージ
Ubuntu:16.04:LTS
asymptote
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:16.04:LTS
love
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:16.04:LTS
mame
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:16.04:LTS
psychtoolbox-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:16.04:LTS
rbdoom3bfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:18.04:LTS
asymptote
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:18.04:LTS
goxel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:18.04:LTS
love
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:18.04:LTS
mame
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.195+dfsg.1-2ubuntu0.1~esm1"}]}]
Ubuntu:18.04:LTS
psychtoolbox-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:18.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:18.04:LTS
rbdoom3bfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
asymptote
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
goxel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
love
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:20.04:LTS
mame
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.220+dfsg.1-1ubuntu0.1~esm1"}]}]
Ubuntu:20.04:LTS
psychtoolbox-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
rbdoom3bfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
renderdoc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
asymptote
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
goxel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
love
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
psychtoolbox-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
qt6-webengine
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
rbdoom3bfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
renderdoc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
tinyexr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:22.04:LTS
mame
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.242+dfsg.1-1ubuntu0.1~esm1"}]}]
Ubuntu:24.04:LTS
asymptote
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
goxel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
love
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
psychtoolbox-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
qt6-webengine
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
rbdoom3bfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
tinyexr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:24.04:LTS
mame
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.264+dfsg.1-1ubuntu0.1~esm1"}]}]
Ubuntu:25.10
asymptote
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:25.10
goxel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:25.10
love
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:25.10
mame
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.277+dfsg.1-4ubuntu0.1"}]}]
Ubuntu:25.10
psychtoolbox-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:25.10
qt6-webengine
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:25.10
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:25.10
rbdoom3bfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:25.10
tinyexr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
asymptote
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
goxel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
love
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
mame
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
psychtoolbox-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
qt6-webengine
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
rbdoom3bfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:26.04:LTS
tinyexr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:18.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:20.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:22.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:24.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:26.04:LTS
qtwebengine-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]