PT-2017-4144 · Ilmbase+3 · Openexr+3
Brandon Perry
·
Publicado
2017-05-21
·
Atualizado
2024-06-15
·
CVE-2017-9110
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenEXR version 2.2.0
Description
The issue is related to an invalid read in the
hufDecode function, which could cause the application to crash. It is associated with a buffer data boundary read issue in the OpenEXR library. Exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations
For OpenEXR version 2.2.0, consider disabling the
hufDecode function as a temporary workaround until a patch is available. Restrict access to the ImfHuf.cpp file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Openexr
Suse
Ubuntu