Lucene search

MitreCVE-2020-11762

HistoryApr 14, 2020 - 11:15 p.m.

CVE-2020-11762

2020-04-1423:15:12

CWE-787

CWE-125

mitre

web.nvd.nist.gov

214

security

vulnerability

openexr

out-of-bounds

nvd

cve-2020-11762

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

41.3%

JSON

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.

Affected configurations

Nvd

Node

openexropenexrRange<2.4.1

Node

fedoraprojectfedoraMatch32

Node

canonicalubuntu_linuxMatch16.04esm

canonicalubuntu_linuxMatch18.04lts

canonicalubuntu_linuxMatch19.10

canonicalubuntu_linuxMatch20.04lts

Node

opensuseleapMatch15.1

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

Node

appleicloudRange<7.20windows

appleicloudRange10.0–11.3windows

appleitunesRange<12.10.8windows

appleipadosRange<13.6

appleiphone_osRange<13.6

applemac_os_xRange<10.15.6

applemac_os_xRange10.13.0–10.13.6

applemac_os_xRange10.14.0–10.14.6

applemac_os_xMatch10.13.6-

applemac_os_xMatch10.13.6security_update_2018-002

applemac_os_xMatch10.13.6security_update_2018-003

applemac_os_xMatch10.13.6security_update_2019-001

applemac_os_xMatch10.13.6security_update_2019-002

applemac_os_xMatch10.13.6security_update_2019-003

applemac_os_xMatch10.13.6security_update_2019-004

applemac_os_xMatch10.13.6security_update_2019-005

applemac_os_xMatch10.13.6security_update_2019-006

applemac_os_xMatch10.13.6security_update_2019-007

applemac_os_xMatch10.13.6security_update_2020-001

applemac_os_xMatch10.13.6security_update_2020-002

applemac_os_xMatch10.13.6security_update_2020-003

applemac_os_xMatch10.14.6-

applemac_os_xMatch10.14.6security_update_2019-001

applemac_os_xMatch10.14.6security_update_2019-002

applemac_os_xMatch10.14.6security_update_2019-004

applemac_os_xMatch10.14.6security_update_2019-005

applemac_os_xMatch10.14.6security_update_2019-006

applemac_os_xMatch10.14.6security_update_2019-007

applemac_os_xMatch10.14.6security_update_2020-001

applemac_os_xMatch10.14.6security_update_2020-002

applemac_os_xMatch10.14.6security_update_2020-003

appletvosRange<13.4.8

applewatchosRange<6.2.8

VendorProductVersionCPE
openexropenexr*cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*
fedoraprojectfedora32cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
canonicalubuntu_linux16.04cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
canonicalubuntu_linux18.04cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
canonicalubuntu_linux19.10cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
canonicalubuntu_linux20.04cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
opensuseleap15.1cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
debiandebian_linux9.0cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
appleicloud*cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
openexr	openexr	*	cpe:2.3:a:openexr:openexr::::::::
fedoraproject	fedora	32	cpe:2.3:o:fedoraproject:fedora:32:::::::*
canonical	ubuntu_linux	16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
canonical	ubuntu_linux	18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
canonical	ubuntu_linux	19.10	cpe:2.3:o:canonical:ubuntu_linux:19.10:::::::*
canonical	ubuntu_linux	20.04	cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
opensuse	leap	15.1	cpe:2.3:o:opensuse:leap:15.1:::::::*
debian	debian_linux	9.0	cpe:2.3:o:debian:debian_linux:9.0:::::::*
debian	debian_linux	10.0	cpe:2.3:o:debian:debian_linux:10.0:::::::*
apple	icloud	*	cpe:2.3:a:apple:icloud::::::windows::*