CVE-2022-43593: Null Pointer Dereference
First published: Thu Dec 22 2022(Updated: )
A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An attacker can provide malicious input to trigger this vulnerability.
Credit: talos-cna@cisco.com talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openimageio Openimageio | =2.4.4.2 | |
| Debian Debian Linux | =11.0 | |
| debian/openimageio | <=2.0.5~dfsg0-1 | 2.0.5~dfsg0-1+deb10u2 2.2.10.1+dfsg-1+deb11u1 2.4.7.1+dfsg-2 2.4.14.0+dfsg-1 |
| =2.4.4.2 | ||
| =11.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this denial of service vulnerability?
The vulnerability ID for this denial of service vulnerability is CVE-2022-43593.
What is the severity rating of CVE-2022-43593?
CVE-2022-43593 has a severity rating of 5.9, which is considered medium.
Which software is affected by CVE-2022-43593?
OpenImageIO Project OpenImageIO version 2.4.4.2 and Debian Debian Linux version 11.0 are affected by CVE-2022-43593.
What is the impact of CVE-2022-43593?
CVE-2022-43593 can lead to null pointer dereference, causing a denial of service.
Are there any recommended remedies for CVE-2022-43593?
Yes, updating to Openimageio version 2.4.7.1+dfsg-2 or higher can remediate CVE-2022-43593.
- collector/nvd-index
- collector/security-tracker-debian
- agent/type
- agent/weakness
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/openimageio
- canonical/openimageio openimageio
- version/openimageio openimageio/2.4.4.2
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/11.0
- package-manager/debian