PT-2020-6219 · Openexr+7 · Openexr+7

Samuel Groß · Published 2020-04-14 · Updated 2023-01-09 · CVE-2020-11763

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 2.4.1

Description The issue is related to an out-of-bounds read and write in the std::vector, as demonstrated by ImfTileOffsets.cpp. This can potentially allow a remote attacker to cause a denial of service. The vulnerability is associated with a buffer data boundary overflow in the ImfTileOffsets.cpp library of the OpenEXR image storage software.

Recommendations For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ImfTileOffsets.cpp library until a patch is available.

Exploit

Fix

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALT-PU-2020-3135

ALT-PU-2020-3136

ALT-PU-2021-1312

ALT-PU-2021-1313

AZL-44967

BDU:2021-03612

CESA-2020_4039

CVE-2020-11763

DLA-2358-1

DSA-4755-1

MGASA-2020-0189

OESA-2021-1268

OPENSUSE-SU-2020:0682-1

OPENSUSE-SU-2020_0682-1

RHSA-2020:4039

RHSA-2020_4039

SUSE-SU-2020:1292-1

SUSE-SU-2020:1293-1

USN-4339-1

Affected Products

Alt Linux

Centos

Linuxmint

Openexr

Red Hat

Suse

Ubuntu

Itunes

References · 85

• 🔥 https://github.com/xiaoqx/pocs/blob/master/openexr.md · Exploit
• 🔥 https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11763 · Security Note
• https://ubuntu.com/security/CVE-2018-18444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11759 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11765 · Security Note
• https://ubuntu.com/security/CVE-2020-11759 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11761 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1292-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11762 · Security Note
• https://ubuntu.com/security/CVE-2020-11764 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-11763 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0682-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4339-1 · Vendor Advisory