The remote host is affected by the vulnerability described in GLSA-202305-33 (OpenImageIO: Multiple Vulnerabilities)

  - The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings,     which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even     when the unfiltered_html capability is disallowed (for example in multisite setup). (CVE-2022-4198)

  - A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-     branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A     malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive     information leak. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2022-36354)

  - A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP     images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to     arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2022-38143)

  - A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in     OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of     bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a     malicious file to trigger this vulnerability. (CVE-2022-41639)

  - A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in     OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can     leak sensitive process information. An attacker can provide a malicious file to trigger this     vulnerability. (CVE-2022-41649)

  - A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the     image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary     memory address which can lead to denial of service. An attacker can provide a malicious file to trigger     this vulnerability. (CVE-2022-41684)

  - A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of     OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can     provide a malicious file to trigger this vulnerability. (CVE-2022-41794)

  - An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of     OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory     corruption. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2022-41837)

  - A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project     OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2022-41838)

  - An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string     fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker     can provide a malicious file to trigger this vulnerability. (CVE-2022-41977)

  - A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0.
    A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can     lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2022-41981)

  - An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of     OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of     sensitive information. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2022-41988)

  - A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO     Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An     attacker can provide a malicious file to trigger this vulnerability. (CVE-2022-41999)

  - An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO     Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An     attacker can provide malicious input to trigger this vulnerability. (CVE-2022-43592)

  - A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project     OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An     attacker can provide malicious input to trigger this vulnerability. (CVE-2022-43593)

  - Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO     Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer     dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This     vulnerability applies to writing .bmp files. (CVE-2022-43594)

  - Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO     Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer     dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This     vulnerability applies to writing .fits files. (CVE-2022-43595)

  - An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of     OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap     data. An attacker can provide malicious input to trigger this vulnerability. (CVE-2022-43596)

  - Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of     OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary     code execution. An attacker can provide malicious input to trigger these vulnerabilities.This     vulnerability arises when the `m_spec.format` is `TypeDesc::UINT8`. (CVE-2022-43597)

  - Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of     OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary     code execution. An attacker can provide malicious input to trigger these vulnerabilities.This     vulnerability arises when the `m_spec.format` is `TypeDesc::UINT16`. (CVE-2022-43598)

  - Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO     Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow.
    An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when     the `xmax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT8` (CVE-2022-43599)

  - Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO     Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow.
    An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when     the `xmax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT16` (CVE-2022-43600)

  - Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO     Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow.
    An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when     the `ymax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT16` (CVE-2022-43601)

  - Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO     Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow.
    An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when     the `ymax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT8` (CVE-2022-43602)

  - A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project     OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to denial of service. An attacker     can provide a malicious file to trigger this vulnerability. (CVE-2022-43603)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e63bc3eca2 advisory.

  - A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-     branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A     malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive     information leak. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2022-36354)

  - A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP     images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to     arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2022-38143)

  - A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in     OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of     bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a     malicious file to trigger this vulnerability. (CVE-2022-41639)

  - A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the     image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary     memory address which can lead to denial of service. An attacker can provide a malicious file to trigger     this vulnerability. (CVE-2022-41684)

  - A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of     OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can     provide a malicious file to trigger this vulnerability. (CVE-2022-41794)

  - A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project     OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide     a malicious file to trigger this vulnerability. (CVE-2022-41838)

  - An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string     fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker     can provide a malicious file to trigger this vulnerability. (CVE-2022-41977)

  - An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of     OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of     sensitive information. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2022-41988)

  - A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO     Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An     attacker can provide a malicious file to trigger this vulnerability. (CVE-2022-41999)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートの Fedora 36 ホストには、FEDORA-2022-e63bc3eca2 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - OpenImageIO master-branch-9aeece7a および v2.3.19.0 の RLA フォーマットパーサーには、より具体的にはランレングスでエンコードされたバイトスパンが処理される方法にヒープ領域外読み取りの脆弱性が存在します。無効な形式の RLA ファイルにより、ヒープメタデータの領域外読み取りが発生し、機密情報の漏洩が発生する可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2022-36354)

  - OpenImageIO v2.3.19.0 が RLE でエンコードされた BMP 画像を処理する方法に、ヒープ領域外書き込みの脆弱性が存在します。特別に細工された bmp ファイルが、任意の領域外メモリに書き込み、任意のコードの実行を引き起こす可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。
    (CVE-2022-38143)

  - OpenImageIO master-branch-9aeece7a および v2.3.19.0 の TIFF 画像パーサーのタイルデコーディングコードに、ヒープベースのバッファオーバーフローの脆弱性が存在します。特別に細工された TIFF ファイルにより、領域外メモリ破損が発生し、任意のコードが実行される可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2022-41639)

  - PSD 画像ファイルの画像ファイルディレクトリ部分を解析する際に、OpenImageIO master-branch-9aeece7a にヒープ領域外読み取りの脆弱性が存在します。特別に細工された .psd ファイルにより、任意のメモリアドレスの読み取りが発生し、サービス拒否が発生する可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2022-41684)

  - OpenImageIO 2.3.19.0 の PSD サムネイルリソース解析コードに、ヒープベースのバッファオーバーフローの脆弱性が存在します。特別に細工された PSD ファイルにより、任意のコードが実行される可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2022-41794)

  - OpenImageIO Project OpenImageIO v2.4.4.2 の DDS スキャンライン解析機能にコード実行の脆弱性が存在します。特別に細工された .dds により、ヒープバッファオーバーフローが発生する可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2022-41838)

  - OpenImageIO バージョン v2.3.19.0 が TIFF 画像ファイルの文字列フィールドを処理する方法に、領域外読み取りの脆弱性が存在します。特別に細工された TIFF ファイルにより、情報漏洩が発生する可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2022-41977)

  - OpenImageIO Project OpenImageIO v2.3.19.0 の OpenImageIO: : decode_iptc_iim() 機能に情報漏洩の脆弱性が存在します。特別に細工された TIFF ファイルにより、機密情報が漏洩する可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。
    (CVE-2022-41988)

  - OpenImageIO Project OpenImageIO v2.3.19.0 および v2.4.4.2 の DDS ネイティブタイル読み取り機能に、サービス拒否の脆弱性が存在します。特別に細工された .dds により、サービス拒否が発生する可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。(CVE-2022-41999)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端主機受到 GLSA-202305-33 中所述的弱點影響 (OpenImageIO：多個弱點)

  - WP Social Sharing WordPress plugin 2.2 及更低版本未清理並逸出其部分設定，即使 unfiltered_html 功能遭到禁止 (例如在多網站設定中)，仍可允許高權限使用者 (如管理員) 執行已儲存的跨網站指令碼攻擊)。(CVE-2022-4198)

  - OpenImageIO master-branch-9aeece7a 和 v2.3.19.0 的 RLA 格式剖析器中存在堆積超出邊界讀取弱點。更具體地說，在處理執行長度編碼的位元組範圍時會發生此問題。格式錯誤的 RLA 檔案可導致程式在讀取堆積中繼資料時超出邊界，進而引致敏感資訊洩漏。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-36354)

  - OpenImageIO v2.3.19.0 處理 RLE 編碼的 BMP 影像的方式中存在一個堆積超出邊界寫入弱點。特製的 bmp 檔案可導致任意超出邊界記憶體寫入問題，進而引致任意程式碼執行。攻擊者可能透過提供惡意檔案，來觸發此弱點。
    (CVE-2022-38143)

  - 在 OpenImageIO master-branch-9aeece7a 和 v2.3.19.0 中，TIFF 影像剖析器的區塊解碼程式碼中存在堆積型緩衝區溢位弱點。特製的 TIFF 檔案可導致超出邊界的記憶體損毀，進而引致任意程式碼執行。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41639)

  - 在 OpenImageIO v2.3.19.0 中剖析 TIFF 影像時，程式在處理 IPTC 資料時會發生堆積讀取超出邊界。特製的 TIFF 檔案可造成相鄰的堆積記憶體讀取，進而洩漏敏感的處理序資訊。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41649)

  - 剖析 PSD 影像檔的影像檔案目錄部分時，OpenImageIO master-branch-9aeece7a 中會發生堆積讀取超出邊界。特製的 .psd 檔案可造成任意記憶體位址讀取，進而導致拒絕服務。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41684)

  - OpenImageIO 2.3.19.0的 PSD 縮圖資源剖析程式碼中存在堆積型緩衝區溢位弱點。特製的 PSD 檔案可導致任意程式碼執行。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41794)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 OpenImageIO: : add_exif_item_to_spec 功能中存在超出邊界寫入弱點。特製的 exif 中繼資料可導致堆疊型記憶體損毀。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41837)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 DDS 掃描線剖析功能中存在程式碼執行弱點。特製的 .dds 文件可導致堆積緩衝區溢位。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41838)

  - OpenImageIO v2.3.19.0 處理 TIFF 影像檔中字串欄位的方式存在超出邊界讀取弱點。特製的 TIFF 檔案可導致資訊洩漏。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41977)

  - OpenImageIO v2.3.19.0 的 TGA 檔案格式剖析器中存在堆疊型緩衝區溢位弱點。
    特製的 targa 檔案可導致處理序堆疊發生超出邊界讀取和寫入，進而引致任意程式碼執行。攻擊者可能透過提供惡意檔案，來觸發此弱點。
    (CVE-2022-41981)

  - OpenImageIO Project OpenImageIO v2.3.19.0 的 OpenImageIO: : decode_iptc_iim() 功能中存在資訊洩漏弱點。特製的 TIFF 檔案可導致敏感資訊洩漏。攻擊者可能透過提供惡意檔案，來觸發此弱點。
    (CVE-2022-41988)

  - OpenImageIO Project OpenImageIO v2.3.19.0 和 v2.4.4.2 的 DDS 原生磁貼讀取功能中存在拒絕服務弱點。特製的 .dds 文件可導致拒絕服務。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-41999)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 DPXOutput: : close() 功能中存在資訊洩漏弱點。特製的 ImageOutput 物件可導致堆積資料洩漏。攻擊者可藉由提供惡意輸入來觸發此弱點。(CVE-2022-43592)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 DPXOutput: : close() 功能中存在拒絕服務弱點。特製的 ImageOutput 物件可導致 Null 指標解除參照。攻擊者可藉由提供惡意輸入來觸發此弱點。(CVE-2022-43593)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的影像輸出關閉功能中存在多個拒絕服務弱點。特製的 ImageOutput 物件可導致多個 null 指標解除參照問題。攻擊者可透過提供多個惡意輸入來觸發這些弱點。此弱點適用於寫入 .bmp 檔案。(CVE-2022-43594)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的影像輸出關閉功能中存在多個拒絕服務弱點。特製的 ImageOutput 物件可導致多個 null 指標解除參照問題。攻擊者可透過提供多個惡意輸入來觸發這些弱點。此弱點適用於寫入 .fits 檔案。(CVE-2022-43595)

  OpenImageIO Project OpenImageIO v2.4.4.2 的 IFFOutput 通道交錯功能中存在資訊洩漏弱點。特製的 ImageOutput 物件可引致堆積資料洩漏。攻擊者可藉由提供惡意輸入來觸發此弱點。(CVE-2022-43596)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 IFFOutput 對齊填補功能中存在多個記憶體損毀弱點。特製的 ImageOutput 物件可引致任意程式碼執行。攻擊者可透過提供惡意輸入來觸發這些弱點。當 `m_spec.format` 為 `TypeDesc: : UINT8`. (CVE-2022-43597)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 IFFOutput 對齊填補功能中存在多個記憶體損毀弱點。特製的 ImageOutput 物件可引致任意程式碼執行。攻擊者可透過提供惡意輸入來觸發這些弱點。當 `m_spec.format` 為 `TypeDesc: :UINT16`. (CVE-2022-43598)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 IFFOutput: : close() 功能中存在多個程式碼執行弱點。特製的 ImageOutput 物件可引致堆積緩衝區溢位。
    攻擊者可透過提供惡意輸入來觸發這些弱點。當 `xmax` 變數設定為 0xFFFF 並且`m_spec.format` 爲 `TypeDesc: : UINT8` (CVE-2022-43599)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 IFFOutput: : close() 功能中存在多個程式碼執行弱點。特製的 ImageOutput 物件可引致堆積緩衝區溢位。
    攻擊者可透過提供惡意輸入來觸發這些弱點。當 `xmax` 變數設定為 0xFFFF 並且`m_spec.format` 爲 `TypeDesc: :UINT16` (CVE-2022-43600)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 IFFOutput: : close() 功能中存在多個程式碼執行弱點。特製的 ImageOutput 物件可引致堆積緩衝區溢位。
    攻擊者可透過提供惡意輸入來觸發這些弱點。當 `ymax` 變數設定為 0xFFFF 並且`m_spec.format` 爲 `TypeDesc: :UINT16` (CVE-2022-43601)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 IFFOutput: : close() 功能中存在多個程式碼執行弱點。特製的 ImageOutput 物件可引致堆積緩衝區溢位。
    攻擊者可透過提供惡意輸入來觸發這些弱點。當 `ymax` 變數設定為 0xFFFF 並且`m_spec.format` 爲 `TypeDesc: : UINT8` (CVE-2022-43602)

  - OpenImageIO Project OpenImageIO v2.4.4.2 的 ZfileOutput: : close() 功能中存在拒絕服務弱點。特製的 ImageOutput 物件可導致拒絕服務。攻擊者可能透過提供惡意檔案，來觸發此弱點。(CVE-2022-43603)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程主机受到 GLSA-202305-33 中所述漏洞的影响（OpenImageIO：多个漏洞）

  - WP Social Sharing WordPress 插件 2.2 及更低版本未审查和转义其某些设置，这可允许高权限用户（例如管理员）在 unfiltered_html 功能被禁用时（例如在多站点设置中）执行存储的跨站脚本攻击）。(CVE-2022-4198)

  - OpenImageIO master-branch-9aeece7a 和 v2.3.19.0 版 RLA 格式解析器中存在堆越界读取漏洞，具体而言，该漏洞位于处理游程编码字节跨度的方式中。不规范的 RLA 文件可导致越界读取堆元数据，进而导致敏感信息泄漏。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-36354)

  - OpenImageIO v2.3.19.0 处理 RLE 编码的 BMP 图像的方式中存在堆越界写入漏洞。特别构建的 bmp 文件可造成任意越界内存写入，进而导致任意代码执行。攻击者可提供恶意路径来触发此漏洞。
    (CVE-2022-38143)

  - OpenImageIO master-branch-9aeece7a 和 v2.3.19.0 版 TIFF 图像解析器的平铺解码代码中存在一个基于堆的缓冲区溢出漏洞。特制的 TIFF 文件可导致越界内存损坏，从而导致任意代码执行。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41639)

  - 在 OpenImageIO v2.3.19.0 中解析 TIFF 图像时，处理 IPTC 数据的过程中存在堆越界读取漏洞。特别构建的 TIFF 文件可导致读取邻近堆内存，进而泄漏敏感进程信息。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41649)

  - 解析 PSD 图像文件的图像文件目录部分时，OpenImageIO master-branch-9aeece7a 中存在堆越界读取漏洞。特别构建的 .psd 文件可导致读取任意内存地址，进而造成拒绝服务。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41684)

  - OpenImageIO 2.3.19.0 版的 PSD 缩略图资源解析代码中存在一个基于堆的缓冲区溢出漏洞 。特制的 PSD 文件可导致任意代码执行。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41794)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的 OpenImageIO: : add_exif_item_to_spec 功能中存在越界写入漏洞。特制的 exif 元数据可导致基于堆栈的内存损坏。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41837)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版 DDS 扫描线解析功能中存在代码执行漏洞。特制的 .dds 可导致堆缓冲区溢出。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41838)

  - OpenImageIO v2.3.19.0 版处理 TIFF 图像文件中字符串字段的方式中存在越界读取漏洞。特制的 TIFF 文件可导致信息泄露。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41977)

  - OpenImageIO v2.3.19.0 版的 TGA 文件格式解析器中存在基于堆栈的缓冲区溢出漏洞。
    特别构建的 targa 文件可导致对进程堆栈的越界读取和写入，进而导致任意代码执行。攻击者可提供恶意路径来触发此漏洞。
    (CVE-2022-41981)

  - OpenImageIO Project OpenImageIO v2.3.19.0 版的 OpenImageIO: : decode_iptc_iim() 功能中存在信息泄露漏洞。特别构建的 TIFF 文件可导致敏感信息泄露。攻击者可提供恶意路径来触发此漏洞。
    (CVE-2022-41988)

  - OpenImageIO Project OpenImageIO v2.3.19.0 和 v2.4.4.2 版的 DDS 本机平铺读取功能中存在一个拒绝服务漏洞。特制的 .dds 可导致拒绝服务。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-41999)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的 DPXOutput: : close() 功能中存在信息泄露漏洞。特别构建的 ImageOutput 对象可导致泄漏堆数据。攻击者可提供恶意输入来触发此漏洞。(CVE-2022-43592)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的 DPXOutput: : close() 功能中存在拒绝服务漏洞。特别构建的 ImageOutput 对象可导致空指针取消引用。攻击者可提供恶意输入来触发此漏洞。(CVE-2022-43593)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的图像输出关闭功能中存在多个拒绝服务漏洞。特别构建的 ImageOutput 对象可导致多种空指针取消引用。攻击者可提供恶意的多种输入以触发这些漏洞。此漏洞适用于写入 .bmp 文件。(CVE-2022-43594)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的图像输出关闭功能中存在多个拒绝服务漏洞。特别构建的 ImageOutput 对象可导致多种空指针取消引用。攻击者可提供恶意的多种输入以触发这些漏洞。此漏洞适用于写入 .fits 文件。(CVE-2022-43595)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的 IFFOutput 通道交错功能中存在信息泄露漏洞。特别构建的 ImageOutput 对象可导致泄漏堆数据。攻击者可提供恶意输入来触发此漏洞。(CVE-2022-43596)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的 IFFOutput 对齐填充功能中存在多个内存损坏漏洞。特别构建的 ImageOutput 对象可导致任意代码执行。攻击者可提供恶意输入以触发这些漏洞。当“m_spec.format”为“TypeDesc: : UINT8`. (CVE-2022-43597)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的 IFFOutput 对齐填充功能中存在多个内存损坏漏洞。特别构建的 ImageOutput 对象可导致任意代码执行。攻击者可提供恶意输入以触发这些漏洞。当“m_spec.format”为“TypeDesc: :UINT16`. (CVE-2022-43598)

  OpenImageIO Project OpenImageIO v2.4.4.2 版的 IFFOutput: : close() 功能中存在多个代码执行漏洞。特别构建的 ImageOutput 对象可导致泄漏堆数据。
    攻击者可提供恶意输入以触发这些漏洞。当“xmax”变量被设为“0xFFFF”，且“m_spec.format”为“TypeDesc: : UINT8` (CVE-2022-43599)

  OpenImageIO Project OpenImageIO v2.4.4.2 版的 IFFOutput: : close() 功能中存在多个代码执行漏洞。特别构建的 ImageOutput 对象可导致泄漏堆数据。
    攻击者可提供恶意输入以触发这些漏洞。当“xmax”变量被设为“0xFFFF”，且“m_spec.format”为“TypeDesc: :UINT16` (CVE-2022-43600)

  OpenImageIO Project OpenImageIO v2.4.4.2 版的 IFFOutput: : close() 功能中存在多个代码执行漏洞。特别构建的 ImageOutput 对象可导致泄漏堆数据。
    攻击者可提供恶意输入以触发这些漏洞。当“ymax”变量被设为“0xFFFF”，且“m_spec.format”为“TypeDesc: :UINT16` (CVE-2022-43601)

  OpenImageIO Project OpenImageIO v2.4.4.2 版的 IFFOutput: : close() 功能中存在多个代码执行漏洞。特别构建的 ImageOutput 对象可导致泄漏堆数据。
    攻击者可提供恶意输入以触发这些漏洞。当“ymax”变量被设为“0xFFFF”，且“m_spec.format”为“TypeDesc: : UINT8` (CVE-2022-43602)

  - OpenImageIO Project OpenImageIO v2.4.4.2 版的 DZfileOutput: : close() 功能中存在拒绝服务漏洞。特别构建的 ImageOutput 对象可导致拒绝服务。攻击者可提供恶意路径来触发此漏洞。(CVE-2022-43603)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
176473	GLSA-202305-33 : OpenImageIO: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2023/5/30	2023/5/30	critical
169432	Fedora 36 : OpenImageIO (2022-e63bc3eca2)	Nessus	Fedora Local Security Checks	2022/12/31	2023/9/11	critical
169432	Fedora 36: OpenImageIO (2022-e63bc3eca2)	Nessus	Fedora Local Security Checks	2022/12/31	2023/9/11	critical
176473	GLSA-202305-33 : OpenImageIO：多個弱點	Nessus	Gentoo Local Security Checks	2023/5/30	2023/5/30	critical
176473	GLSA-202305-33 : OpenImageIO: 多个漏洞	Nessus	Gentoo Local Security Checks	2023/5/30	2023/5/30	critical

検出

プラグインの検索

critical

critical

critical

critical

critical