DSA-4755: -1 openexr -- security update
Published Aug 29, 2020
·Updated
Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files.
Affected Software
2 affected components
debian/openexr
debian/openexr
Event History
Aug 29, 2020
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Who is exposed to these issues?
Systems using the Debian OpenEXR package may be exposed when they process EXR image files, particularly files received from untrusted sources.
2
What does an attacker need to exploit the vulnerabilities?
An attacker would need to cause the affected software to process a malformed EXR image file. The reported impact includes denial of service and potentially arbitrary code execution.