Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-3430

Fixed in a distro release EPSS 1%CVSS 7.5

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.

Published 2023-12-18 · CVE record · OSV

Products: Fedora Extra Packages for Enterprise Linux, Fedora

Distro releases

ReleasePackageFixed in
Debian 12openimageiono fix
Debian 13openimageio2.4.13.0+dfsg-1
Debian 14openimageio2.4.13.0+dfsg-1
Ubuntu 22.04 LTSopenimageiono fix
Ubuntu Pro 16.04 LTSopenimageiono fix
Ubuntu Pro 18.04 LTSopenimageiono fix
Ubuntu Pro 20.04 LTSopenimageiono fix