Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This vulnerability applies to writing .fits files.
References
Link | Resource |
---|---|
https://security.gentoo.org/glsa/202305-33 | |
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1653 | Exploit Third Party Advisory |
https://www.debian.org/security/2023/dsa-5384 | Third Party Advisory |
Configurations
History
30 May 2023, 06:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
15 May 2023, 15:49
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.debian.org/security/2023/dsa-5384 - Third Party Advisory | |
CPE | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:a:openimageio:openimageio:2.4.4.2:*:*:*:*:*:*:* |
|
First Time |
Debian debian Linux
Debian Openimageio Openimageio openimageio |
11 Apr 2023, 04:16
Type | Values Removed | Values Added |
---|---|---|
References |
|
30 Dec 2022, 13:20
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
References | (MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2022-1653 - Exploit, Third Party Advisory | |
CPE | cpe:2.3:a:openimageio_project:openimageio:2.4.4.2:*:*:*:*:*:*:* | |
First Time |
Openimageio Project
Openimageio Project openimageio |
22 Dec 2022, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-22 22:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-43595
Mitre link : CVE-2022-43595
CVE.ORG link : CVE-2022-43595
JSON object : View
Products Affected
openimageio
- openimageio
debian
- debian_linux
CWE
CWE-476
NULL Pointer Dereference