Published: 14/04/2020 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

An issue exists in OpenEXR prior to 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openexr openexr
fedoraproject fedora 32
canonical ubuntu linux 18.04
canonical ubuntu linux 19.10
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04
opensuse leap 15.1
debian debian linux 9.0
debian debian linux 10.0
apple mac os x
apple tvos
apple iphone os
apple icloud
apple itunes
apple watchos
apple ipados
apple mac os x 10.14.6
apple mac os x 10.13.6

Several security issues were fixed in OpenEXR ...

Debian Bug report logs - #959444 openexr: CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 Package: openexr; Maintainer for openexr is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Source for openexr is src:openexr (PTS, buildd, po ...

Debian Bug report logs - #990899 openexr: CVE-2021-3605 Package: src:openexr; Maintainer for src:openexr is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 10 Jul 2021 21:21:02 UTC Severity: important Tags: security, upstre ...

Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files For the stable distribution (buster), these problems have been fixed in version 221-41+deb10u1 We recommend that you upgrade your openexr packages F ...

CWE-125 https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 https://usn.ubuntu.com/4339-1/http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html https://www.debian.org/security/2020/dsa-4755 https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html https://support.apple.com/kb/HT211293 https://support.apple.com/kb/HT211290 https://support.apple.com/kb/HT211291 https://support.apple.com/kb/HT211288 https://support.apple.com/kb/HT211289 https://support.apple.com/kb/HT211295 https://support.apple.com/kb/HT211294 https://security.gentoo.org/glsa/202107-27 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/https://usn.ubuntu.com/4339-1/https://nvd.nist.gov

CVE-2020-11760

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect