CVE-2017-9115: High severity OpenEXR OpenEXR vulnerability
Published May 21, 2017
·Updated
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
Affected Software
2 affected componentsFixes available
OpenEXR OpenEXR=2.2.0
debian/openexr
2.5.4-2+deb11u13.1.5-53.1.13-23.4.6+ds-4
Remediation
Event History
May 21, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:42 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·08:34 PM
RemedyDescriptionSeverityAffected Software
Mar 19, 2026
Data Sourced
via Debian·08:56 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2017-9115?
CVE-2017-9115 is a vulnerability in OpenEXR 2.2.0 that could cause the application to crash or execute arbitrary code.
2
How severe is CVE-2017-9115?
CVE-2017-9115 has a severity of 8.8 (high).
3
How can I fix CVE-2017-9115?
To fix CVE-2017-9115, update OpenEXR to version 2.2.1-4.1+deb10u1 or higher, 2.2.1-4.1ubuntu0.1 or higher, 2.3.0-6ubuntu0.1 or higher, 2.2.0-10ubuntu2.1 or higher, or 2.2.0-11.1ubuntu1.1 or higher.
4
Where can I find more information about CVE-2017-9115?
You can find more information about CVE-2017-9115 at the following links: [1] [2] [3].
5
Which software is affected by CVE-2017-9115?
OpenEXR versions 2.2.0, 2.2.1, 2.3.0, and 3.1.5 are affected by CVE-2017-9115.