GCVE-VVD-MAGEIA-2018-32

Advisory Published

Vulnetix · Advisory published February 17, 2018

In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash (CVE-2017-9110). In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash (CVE-2017-9112). In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash (CVE-2017-9116).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	pure-ftpd	0 (affected), 1.0.47-1.4.mga6 (unaffected)	—
Mageia	OpenEXR	0 (affected), 2.2.0-4.1.mga5 (unaffected), 0 (affected), 2.2.0-4.1.mga5 (unaffected)	—