CVE-2017-9115
Description
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
Risk Information
Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.756
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| command-line tools for the OpenEXR image format (USN-4148-1) openexr_2.2.0-10ubuntu2.1_i386.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) openexr_2.2.0-10ubuntu2.1_amd64.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) openexr_2.2.1-4.1ubuntu0.1_i386.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) openexr_2.2.1-4.1ubuntu0.1_amd64.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) openexr_2.2.0-11.1ubuntu1.1_i386.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) openexr_2.2.0-11.1ubuntu1.1_amd64.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) libopenexr22_2.2.0-10ubuntu2.1_i386.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) libopenexr22_2.2.0-10ubuntu2.1_amd64.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) libopenexr22_2.2.0-11.1ubuntu1.1_i386.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) libopenexr22_2.2.0-11.1ubuntu1.1_amd64.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) libopenexr23_2.2.1-4.1ubuntu0.1_i386.deb | Linux |
| command-line tools for the OpenEXR image format (USN-4148-1) libopenexr23_2.2.1-4.1ubuntu0.1_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.3.0-6ubuntu0.1_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.3.0-6ubuntu0.1_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.2.0-10ubuntu2.2_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.2.0-10ubuntu2.2_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.2.1-4.1ubuntu1.1_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.2.1-4.1ubuntu1.1_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.2.0-11.1ubuntu1.2_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) openexr_2.2.0-11.1ubuntu1.2_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr22_2.2.0-10ubuntu2.2_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr22_2.2.0-10ubuntu2.2_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr22_2.2.0-11.1ubuntu1.2_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr22_2.2.0-11.1ubuntu1.2_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr23_2.2.1-4.1ubuntu1.1_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr23_2.2.1-4.1ubuntu1.1_amd64.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr24_2.3.0-6ubuntu0.1_i386.deb | Linux |
| tools for the OpenEXR image format (USN-4339-1) libopenexr24_2.3.0-6ubuntu0.1_amd64.deb | Linux |
| openexr security update(DSA-4755-1) openexr_2.2.1-4.1+deb10u1_i386.deb | Linux |
| openexr security update(DSA-4755-1) openexr_2.2.1-4.1+deb10u1_amd64.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234