Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2019-0373 Moderate: OpenEXR Denial Of Service Risk

mageia
Calendar Grey December 8, 2019
Dist Mageia Esm H88
Mageia 2020-0456 releases an important patch for the libpng library, addressing a potential exploitation vulnerability. Discover more about this essential upgrade.
The updated packages fix a security vulnerability: Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory...

Summary

The updated packages fix a security vulnerability:
Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. (CVE-2017-14988)

References

- https://bugs.mageia.org/show_bug.cgi?id=25758

- - https://www.cve.org/CVERecord?id=CVE-2017-14988

Topics%20covered

Topics Covered

security advisory denial of service memory allocation openexr mageia

Resolution

SRPMS

- 7/core/openexr-2.3.0-2.1.mga7

Publication date: 08 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0373.html
Type: security
CVE: CVE-2017-14988

Topics%20covered

Topics Covered

security advisory denial of service memory allocation openexr mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here