ID de Prueba:	1.3.6.1.4.1.25623.1.1.4.2020.1293.1
Categoría:	SuSE Local Security Checks
Título:	SUSE: Security Advisory (SUSE-SU-2020:1293-1)
Resumen:	The remote host is missing an update for the 'openexr' package(s) announced via the SUSE-SU-2020:1293-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openexr' package(s) announced via the SUSE-SU-2020:1293-1 advisory. Vulnerability Insight: This update for openexr provides the following fix: Security issues fixed: CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier (bsc#1169575). CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp (bsc#1169574). CVE-2020-11763: Fixed an out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp (bsc#1169576). CVE-2020-11762: Fixed an out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case (bsc#1169549). CVE-2020-11761: Fixed an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp (bsc#1169578). CVE-2020-11760: Fixed an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp (bsc#1169580). CVE-2020-11758: Fixed an out-of-bounds read in ImfOptimizedPixelReading.h (bsc#1169573). Non-security issue fixed: Enable tests when building the package on x86_64. (bsc#1146648) Affected Software/OS: 'openexr' package(s) on SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-11758 Common Vulnerability Exposure (CVE) ID: CVE-2020-11760 Common Vulnerability Exposure (CVE) ID: CVE-2020-11761 Common Vulnerability Exposure (CVE) ID: CVE-2020-11762 Common Vulnerability Exposure (CVE) ID: CVE-2020-11763 Common Vulnerability Exposure (CVE) ID: CVE-2020-11764 Common Vulnerability Exposure (CVE) ID: CVE-2020-11765
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.