CVE-2024-31047
Fixed in a distro release EPSS <1%CVSS 3.3
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.
Products: openexr
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | openexr | 3.1.5-1.amzn2023.0.5 |
| Amazon Linux 2023 | openexr-devel | 3.1.5-1.amzn2023.0.5 |
| Amazon Linux 2023 | openexr-libs | 3.1.5-1.amzn2023.0.5 |
| Debian 12 | openexr | no fix |
| Debian 13 | openexr | 3.1.13-1 |
| Debian 14 | openexr | 3.1.13-1 |
| Ubuntu Pro 16.04 LTS | openexr | no fix |
| Ubuntu Pro 18.04 LTS | openexr | no fix |
| Ubuntu Pro 20.04 LTS | openexr | no fix |
| Ubuntu Pro 22.04 LTS | openexr | no fix |
| Ubuntu Pro 24.04 LTS | openexr | no fix |