Test ID:	1.3.6.1.4.1.25623.1.1.2.2019.2638
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for OpenEXR (EulerOS-SA-2019-2638)
Summary:	The remote host is missing an update for the Huawei EulerOS 'OpenEXR' package(s) announced via the EulerOS-SA-2019-2638 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'OpenEXR' package(s) announced via the EulerOS-SA-2019-2638 advisory. Vulnerability Insight: In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash.(CVE-2017-9110) In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.(CVE-2017-9113) In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.(CVE-2017-9115) In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.(CVE-2017-9111) Affected Software/OS: 'OpenEXR' package(s) on Huawei EulerOS V2.0SP3. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9110 http://www.openwall.com/lists/oss-security/2017/05/12/5 https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html https://usn.ubuntu.com/4148-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-9111 Debian Security Information: DSA-4755 (Google Search) https://www.debian.org/security/2020/dsa-4755 SuSE Security Announcement: openSUSE-SU-2019:1816 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html SuSE Security Announcement: openSUSE-SU-2019:1826 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00000.html https://usn.ubuntu.com/4339-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-9113 Common Vulnerability Exposure (CVE) ID: CVE-2017-9115
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.