CVE-2017-9113: High severity OpenEXR OpenEXR vulnerability
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openexrto a version that resolves this vulnerability.Fixed in 3.1.5-5Fixed in 3.1.13-2Fixed in 3.4.16+ds-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this OpenEXR vulnerability?
The vulnerability ID for this OpenEXR vulnerability is CVE-2017-9113.
What is the severity of CVE-2017-9113?
CVE-2017-9113 has a severity rating of 8.8, which is considered high.
How does CVE-2017-9113 affect OpenEXR?
CVE-2017-9113 in OpenEXR 2.2.0 could cause the application to crash or execute arbitrary code.
Which versions of OpenEXR are affected by CVE-2017-9113?
OpenEXR versions 2.2.0-11.1ubuntu1.1, 2.2.1-4.1ubuntu0.1, 2.2.1-4.1ubuntu0.1, 2.3.0-6ubuntu0.1, 2.2.0-10ubuntu2.1, and various Debian versions are affected by CVE-2017-9113.
How can I fix the CVE-2017-9113 vulnerability in OpenEXR?
To fix the CVE-2017-9113 vulnerability in OpenEXR, it is recommended to update to the appropriate patched version.