NULL pointer dereference in OpenEXR - CVE-2021-20296

Vulnerability identifier: #VU51935

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-20296

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the Dwa decompression functionality. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

OpenEXR
Gentoo Linux
SUSE Linux Enterprise Module for Desktop Applications
Ubuntu
openEuler
cflinuxfs3
libopenexr22 (Ubuntu package)
openexr (Ubuntu package)
libopenexr24 (Ubuntu package)
OpenEXR
OpenEXR-libs
OpenEXR-debuginfo
OpenEXR-devel
OpenEXR-debugsource
libIlmImf-2_2-23
libIlmImf-2_2-23-debuginfo
libIlmImfUtil-2_2-23
libIlmImfUtil-2_2-23-debuginfo
openexr-debuginfo
openexr-debugsource
openexr-devel

Install update from vendor's website.

OpenEXR - addressed in versions 2.4.3, 3.0.0 beta
cflinuxfs3 - update to 0.247.0
libopenexr22 (Ubuntu package) - addressed in versions 2.2.0-10ubuntu2.6+esm1, 2.2.0-11.1ubuntu1.7
openexr (Ubuntu package) - addressed in versions 2.2.0-10ubuntu2.6+esm1, 2.2.0-11.1ubuntu1.7, 2.3.0-6ubuntu0.5+esm1
libopenexr24 (Ubuntu package) - update to 2.3.0-6ubuntu0.5+esm1
OpenEXR - update to 2.2.0-19
OpenEXR-libs - update to 2.2.0-19
OpenEXR-debuginfo - update to 2.2.0-19
OpenEXR-devel - update to 2.2.0-19
OpenEXR-debugsource - update to 2.2.0-19
libIlmImf-2_2-23 - update to 2.2.1-3.27.1
libIlmImf-2_2-23-debuginfo - update to 2.2.1-3.27.1
libIlmImfUtil-2_2-23 - update to 2.2.1-3.27.1
libIlmImfUtil-2_2-23-debuginfo - update to 2.2.1-3.27.1
openexr-debuginfo - update to 2.2.1-3.27.1
openexr-debugsource - update to 2.2.1-3.27.1
openexr-devel - update to 2.2.1-3.27.1

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854
• https://bugzilla.redhat.com/show_bug.cgi?id=1939141
• https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.3

• Multiple vulnerabilities in OpenEXR
• Cloud Foundry cflinuxfs3 update for OpenEXR
• Gentoo update for OpenEXR
• SUSE update for openexr
• Ubuntu update for openexr
• Ubuntu update for openexr
• openEuler 20.03 LTS SP1 update for OpenEXR
• Ubuntu update for openexr