Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-5841
HistoryFeb 01, 2024 - 7:15 p.m.

CVE-2023-5841

2024-02-0119:15:08
CWE-122
CWE-787
[email protected]
web.nvd.nist.gov
3
openexr
file validation
vulnerability
resolved
versions

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.

Affected configurations

Nvd
Node
openexropenexrRange≤3.2.1
VendorProductVersionCPE
openexropenexr*cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*

Related

nessus 7
debiancve 1
ubuntucve 1
cvelist 1
openvas 3
prion 1
freebsd 1
alpinelinux 1
fedora 2
redhatcve 1
veracode 1
osv 1
cve 1
nessus
nessus
Fedora 40 : openexr (2024-55247f3a4f)
2024-04-29 00:00:00
Fedora 38 : mingw-openexr (2024-f4d51715fe)
2024-02-25 00:00:00
Amazon Linux 2023 : openexr, openexr-devel, openexr-libs (ALAS2023-2024-551)
2024-03-06 00:00:00
debiancve
debiancve
CVE-2023-5841
2024-02-01 19:15:08
ubuntucve
ubuntucve
CVE-2023-5841
2024-02-01 00:00:00
cvelist
cvelist
CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing
2024-02-01 18:28:05
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-7fc5bae919)
2024-02-25 00:00:00
Fedora: Security Advisory for mingw-openexr (FEDORA-2024-f4d51715fe)
2024-02-25 00:00:00
Fedora: Security Advisory (FEDORA-2024-55247f3a4f)
2024-09-10 00:00:00
prion
prion
Heap overflow
2024-02-01 19:15:00
freebsd
freebsd
openexr -- Heap Overflow in Scanline Deep Data Parsing
2023-10-26 00:00:00
alpinelinux
alpinelinux
CVE-2023-5841
2024-02-01 19:15:08
fedora
fedora
[SECURITY] Fedora 38 Update: mingw-openexr-3.1.10-4.fc38
2024-02-25 01:26:34
[SECURITY] Fedora 39 Update: mingw-openexr-3.1.10-4.fc39
2024-02-25 01:26:26
redhatcve
redhatcve
CVE-2023-5841
2024-02-02 14:11:27
veracode
veracode
Out-of-bounds Write
2024-03-17 15:29:12
osv
osv
CVE-2023-5841
2024-02-01 19:15:08
cve
cve
CVE-2023-5841
2024-02-01 19:15:08

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON
Related for NVD:CVE-2023-5841
nessus7debiancve1ubuntucve1cvelist1openvas3prion1freebsd1alpinelinux1fedora2redhatcve1veracode1osv1cve1