CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
openexropenexr
2.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openexr
bookworm
3.1.5-5
fixed
bullseye
2.5.4-2+deb11u1
fixed
bullseye (security)
2.5.4-2+deb11u1
fixed
jessie
no-dsa
sid
3.1.5-5.1
fixed
trixie
3.1.5-5.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openexr
artful
ignored
bionic
not-affected
cosmic
not-affected
disco
not-affected
trusty
dne
xenial
Fixed 2.2.0-10ubuntu2.1
released
zesty
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libIlmImf-2_2-23
suse enterprise desktop 15
2.2.1-1.22
fixed
suse enterprise desktop 15 SP1
2.2.1-3.3.11
fixed
suse enterprise desktop 15 SP2
2.2.1-3.14.1
fixed
suse enterprise desktop 15 SP3
2.2.1-3.24.1
fixed
suse enterprise desktop 15 SP4
2.2.1-3.41.1
fixed
suse enterprise desktop 15 SP5
2.2.1-3.41.1
fixed
suse enterprise desktop 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise desktop 15 SP7
2.2.1-150000.3.43.1
fixed
suse enterprise sap 15
2.2.1-1.22
fixed
suse enterprise sap 15 SP1
2.2.1-3.3.11
fixed
suse enterprise sap 15 SP2
2.2.1-3.14.1
fixed
suse enterprise sap 15 SP3
2.2.1-3.24.1
fixed
suse enterprise sap 15 SP4
2.2.1-3.41.1
fixed
suse enterprise sap 15 SP5
2.2.1-3.41.1
fixed
suse enterprise sap 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise sap 15 SP7
2.2.1-150000.3.43.1
fixed
suse enterprise server 15
2.2.1-1.22
fixed
suse enterprise server 15 SP1
2.2.1-3.3.11
fixed
suse enterprise server 15 SP2
2.2.1-3.14.1
fixed
suse enterprise server 15 SP3
2.2.1-3.24.1
fixed
suse enterprise server 15 SP4
2.2.1-3.41.1
fixed
suse enterprise server 15 SP5
2.2.1-3.41.1
fixed
suse enterprise server 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise server 15 SP7
2.2.1-150000.3.43.1
fixed
libIlmImf-Imf_2_1-21
suse enterprise sap 12 SP2
2.1.0-6.3.1
fixed
suse enterprise sap 12 SP3
2.1.0-6.3.1
fixed
suse enterprise sap 12 SP5
2.1.0-6.13.1
fixed
suse enterprise server 12 SP2
2.1.0-6.3.1
fixed
suse enterprise server 12 SP3
2.1.0-6.3.1
fixed
suse enterprise server 12 SP4
2.1.0-6.3.1
fixed
suse enterprise server 12 SP5
2.1.0-6.13.1
fixed
libIlmImfUtil-2_2-23
suse enterprise desktop 15
2.2.1-1.22
fixed
suse enterprise desktop 15 SP1
2.2.1-3.3.11
fixed
suse enterprise desktop 15 SP2
2.2.1-3.14.1
fixed
suse enterprise desktop 15 SP3
2.2.1-3.24.1
fixed
suse enterprise desktop 15 SP4
2.2.1-3.41.1
fixed
suse enterprise desktop 15 SP5
2.2.1-3.41.1
fixed
suse enterprise desktop 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise desktop 15 SP7
2.2.1-150000.3.43.1
fixed
suse enterprise sap 15
2.2.1-1.22
fixed
suse enterprise sap 15 SP1
2.2.1-3.3.11
fixed
suse enterprise sap 15 SP2
2.2.1-3.14.1
fixed
suse enterprise sap 15 SP3
2.2.1-3.24.1
fixed
suse enterprise sap 15 SP4
2.2.1-3.41.1
fixed
suse enterprise sap 15 SP5
2.2.1-3.41.1
fixed
suse enterprise sap 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise sap 15 SP7
2.2.1-150000.3.43.1
fixed
suse enterprise server 15
2.2.1-1.22
fixed
suse enterprise server 15 SP1
2.2.1-3.3.11
fixed
suse enterprise server 15 SP2
2.2.1-3.14.1
fixed
suse enterprise server 15 SP3
2.2.1-3.24.1
fixed
suse enterprise server 15 SP4
2.2.1-3.41.1
fixed
suse enterprise server 15 SP5
2.2.1-3.41.1
fixed
suse enterprise server 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise server 15 SP7
2.2.1-150000.3.43.1
fixed
openexr
suse enterprise sap 12 SP2
2.1.0-6.3.1
fixed
suse enterprise sap 12 SP3
2.1.0-6.3.1
fixed
suse enterprise sap 12 SP5
2.1.0-6.13.1
fixed
suse enterprise server 12 SP2
2.1.0-6.3.1
fixed
suse enterprise server 12 SP3
2.1.0-6.3.1
fixed
suse enterprise server 12 SP4
2.1.0-6.3.1
fixed
suse enterprise server 12 SP5
2.1.0-6.13.1
fixed
openexr-devel
suse enterprise desktop 15
2.2.1-1.22
fixed
suse enterprise desktop 15 SP1
2.2.1-3.3.11
fixed
suse enterprise desktop 15 SP2
2.2.1-3.14.1
fixed
suse enterprise desktop 15 SP3
2.2.1-3.24.1
fixed
suse enterprise desktop 15 SP4
2.2.1-3.41.1
fixed
suse enterprise desktop 15 SP5
2.2.1-3.41.1
fixed
suse enterprise desktop 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise desktop 15 SP7
2.2.1-150000.3.43.1
fixed
suse enterprise sap 15
2.2.1-1.22
fixed
suse enterprise sap 15 SP1
2.2.1-3.3.11
fixed
suse enterprise sap 15 SP2
2.2.1-3.14.1
fixed
suse enterprise sap 15 SP3
2.2.1-3.24.1
fixed
suse enterprise sap 15 SP4
2.2.1-3.41.1
fixed
suse enterprise sap 15 SP5
2.2.1-3.41.1
fixed
suse enterprise sap 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise sap 15 SP7
2.2.1-150000.3.43.1
fixed
suse enterprise server 15
2.2.1-1.22
fixed
suse enterprise server 15 SP1
2.2.1-3.3.11
fixed
suse enterprise server 15 SP2
2.2.1-3.14.1
fixed
suse enterprise server 15 SP3
2.2.1-3.24.1
fixed
suse enterprise server 15 SP4
2.2.1-3.41.1
fixed
suse enterprise server 15 SP5
2.2.1-3.41.1
fixed
suse enterprise server 15 SP6
2.2.1-150000.3.43.1
fixed
suse enterprise server 15 SP7
2.2.1-150000.3.43.1
fixed