MGASA-2023-0151 - Updated openimageio packages fix security vulnerability

Publication date: 24 Apr 2023
URL: https://advisories.mageia.org/MGASA-2023-0151.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2022-36354,
     CVE-2022-38143,
     CVE-2022-41639,
     CVE-2022-41684,
     CVE-2022-41794,
     CVE-2022-41838,
     CVE-2022-41977,
     CVE-2022-41981,
     CVE-2022-41988,
     CVE-2022-41999,
     CVE-2022-43592,
     CVE-2022-43593,
     CVE-2022-43594,
     CVE-2022-43595,
     CVE-2022-43596,
     CVE-2022-43597,
     CVE-2022-43598,
     CVE-2022-43599,
     CVE-2022-43600,
     CVE-2022-43601,
     CVE-2022-43602,
     CVE-2022-43603,
     CVE-2023-22845,
     CVE-2023-24472,
     CVE-2023-24473

A heap out-of-bounds read vulnerability exists in the RLA format parser of
OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in
the way run-length encoded byte spans are handled. A malformed RLA file
can lead to an out-of-bounds read of heap metadata which can result in
sensitive information leak. (CVE-2022-36354)

A heap out-of-bounds write vulnerability exists in the way OpenImageIO
v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file
can write to arbitrary out of bounds memory, which can lead to arbitrary
code execution. (CVE-2022-38143)

A heap based buffer overflow vulnerability exists in tile decoding code of
TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A
specially-crafted TIFF file can lead to an out of bounds memory
corruption, which can result in arbitrary code execution.
(CVE-2022-41639)

A heap out of bounds read vulnerability exists in the OpenImageIO
master-branch-9aeece7a when parsing the image file directory part of a PSD
image file. A specially-crafted .psd file can cause a read of arbitrary
memory address which can lead to denial of service. (CVE-2022-41684)

A heap based buffer overflow vulnerability exists in the PSD thumbnail
resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD
file can lead to arbitrary code execution. (CVE-2022-41794)

A code execution vulnerability exists in the DDS scanline parsing
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A
specially-crafted .dds can lead to a heap buffer overflow.
(CVE-2022-41838)

An out of bounds read vulnerability exists in the way OpenImageIO version
v2.3.19.0 processes string fields in TIFF image files. A specially-crafted
TIFF file can lead to information disclosure. (CVE-2022-41977)

A stack-based buffer overflow vulnerability exists in the TGA file format
parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead
to out of bounds read and write on the process stack, which can lead to
arbitrary code execution. (CVE-2022-41981)

An information disclosure vulnerability exists in the
OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project
OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a
disclosure of sensitive information. (CVE-2022-41988)

A denial of service vulnerability exists in the DDS native tile reading
functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A
specially-crafted .dds can lead to denial of service. (CVE-2022-41999)

An information disclosure vulnerability exists in the DPXOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially
crafted ImageOutput Object can lead to leaked heap data. (CVE-2022-43592)

A denial of service vulnerability exists in the DPXOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially
crafted ImageOutput Object can lead to null pointer dereference.
(CVE-2022-43593)

Multiple denial of service vulnerabilities exist in the image output
closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2.
Specially crafted ImageOutput Objects can lead to multiple null pointer
dereferences. This vulnerability applies to writing .bmp files.
(CVE-2022-43594)

Multiple denial of service vulnerabilities exist in the image output
closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2.
Specially crafted ImageOutput Objects can lead to multiple null pointer
dereferences. This vulnerability applies to writing .fits files.
(CVE-2022-43595)

An information disclosure vulnerability exists in the IFFOutput channel
interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A
specially crafted ImageOutput Object can lead to leaked heap data.
(CVE-2022-43596)

Multiple memory corruption vulnerabilities exist in the IFFOutput
alignment padding functionality of OpenImageIO Project OpenImageIO
v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary
code execution. This vulnerability arises when the 'm_spec.format' is
'TypeDesc::UINT8'. (CVE-2022-43597)

Multiple memory corruption vulnerabilities exist in the IFFOutput
alignment padding functionality of OpenImageIO Project OpenImageIO
v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary
code execution. This vulnerability arises when the 'm_spec.format' is
'TypeDesc::UINT16'. (CVE-2022-43598)

Multiple code execution vulnerabilities exist in the IFFOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially
crafted ImageOutput Object can lead to a heap buffer overflow. This
vulnerability arises when the 'xmax' variable is set to 0xFFFF and
'm_spec.format' is 'TypeDesc::UINT8'. (CVE-2022-43599)

Multiple code execution vulnerabilities exist in the IFFOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially
crafted ImageOutput Object can lead to a heap buffer overflow. This
vulnerability arises when the 'xmax' variable is set to 0xFFFF and
'm_spec.format' is 'TypeDesc::UINT16'. (CVE-2022-43600)

Multiple code execution vulnerabilities exist in the IFFOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially
crafted ImageOutput Object can lead to a heap buffer overflow. This
vulnerability arises when the 'ymax' variable is set to 0xFFFF and
'm_spec.format' is 'TypeDesc::UINT16'. (CVE-2022-43601)

Multiple code execution vulnerabilities exist in the IFFOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially
crafted ImageOutput Object can lead to a heap buffer overflow. This
vulnerability arises when the 'ymax' variable is set to 0xFFFF and
'm_spec.format' is 'TypeDesc::UINT8'. (CVE-2022-43602)

A denial of service vulnerability exists in the ZfileOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially
crafted ImageOutput Object can lead to denial of service. (CVE-2022-43603)

An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel()
functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially
crafted targa file can lead to information disclosure. (CVE-2023-22845)

A denial of service vulnerability exists in the FitsOutput::close()
functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially
crafted ImageOutput Object can lead to denial of service. (CVE-2023-24472)

An information disclosure vulnerability exists in the
TGAInput::read_tga2_header functionality of OpenImageIO Project
OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a
disclosure of sensitive information. (CVE-2023-24473)

References:
- https://bugs.mageia.org/show_bug.cgi?id=31364
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/T3LET4MEPBSBJZK4EMLEBY4FUXKU5BMN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/MLUXEL7AB2S5ACSDCHG67GEZHUYZBR5O/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LK6TY36VQ3FQXMZ2VXHZGQ43VDLD67GG/
- https://www.debian.org/lts/security/2023/dla-3382
- https://www.debian.org/security/2023/dsa-5384
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36354
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38143
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41639
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41684
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41794
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41838
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41977
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41981
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41988
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41999
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43592
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43593
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43594
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43595
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43596
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43597
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43598
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43599
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43600
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43601
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43602
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43603
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22845
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24472
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24473

SRPMS:
- 8/core/openimageio-2.2.10.0-1.1.mga8

Mageia 2023-0151: openimageio security update

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0

Summary

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. (CVE-2022-36354)
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. (CVE-2022-38143)
A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. (CVE-2022-41639)
A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file director...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=31364

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/T3LET4MEPBSBJZK4EMLEBY4FUXKU5BMN/

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/MLUXEL7AB2S5ACSDCHG67GEZHUYZBR5O/

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LK6TY36VQ3FQXMZ2VXHZGQ43VDLD67GG/

- https://www.debian.org/lts/security/2023/dla-3382

- https://www.debian.org/security/2023/dsa-5384

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36354

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38143

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41639

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41684

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41794

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41838

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41977

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41981

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41988

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41999

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43592

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43593

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43594

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43595

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43596

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43597

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43598

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43599

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43600

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43601

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43602

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43603

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22845

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24472

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24473

Resolution

MGASA-2023-0151 - Updated openimageio packages fix security vulnerability

SRPMS

- 8/core/openimageio-2.2.10.0-1.1.mga8

Severity
Publication date: 24 Apr 2023
URL: https://advisories.mageia.org/MGASA-2023-0151.html
Type: security
CVE: CVE-2022-36354, CVE-2022-38143, CVE-2022-41639, CVE-2022-41684, CVE-2022-41794, CVE-2022-41838, CVE-2022-41977, CVE-2022-41981, CVE-2022-41988, CVE-2022-41999, CVE-2022-43592, CVE-2022-43593, CVE-2022-43594, CVE-2022-43595, CVE-2022-43596, CVE-2022-43597, CVE-2022-43598, CVE-2022-43599, CVE-2022-43600, CVE-2022-43601, CVE-2022-43602, CVE-2022-43603, CVE-2023-22845, CVE-2023-24472, CVE-2023-24473

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved