Ubuntu.comUB:CVE-2023-5841CVE-2023-5841
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
28.8%
Due to a failure in validating the number of scanline samples of a OpenEXR
file containing deep scanline data, Academy Software Foundation OpenEX
image parsing library version 3.2.1 and prior is susceptible to a
heap-based buffer overflow vulnerability. This issue was resolved as of
versions v3.2.2 and v3.1.12 of the affected library.
References
github.com/AcademySoftwareFoundation/openexr/commit/46944c3a87ebc6c5d9a9a4962a94569ba1082bc3
github.com/AcademySoftwareFoundation/openexr/issues/1625
github.com/AcademySoftwareFoundation/openexr/pull/1627
launchpad.net/bugs/cve/CVE-2023-5841
nvd.nist.gov/vuln/detail/CVE-2023-5841
security-tracker.debian.org/tracker/CVE-2023-5841
takeonme.org/cves/CVE-2023-5841.html
www.cve.org/CVERecord?id=CVE-2023-5841
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
28.8%