{ "cveId": "CVE-2023-5841", "url": "https://patchblox.com/security/cve/CVE-2023-5841", "summary": "CVE-2023-5841 is fixed in 7 products on 2 platforms, first by DEBIAN-CVE-2023-5841, released February 1, 2024. It is not reported as exploited. Patch Radar priority: Urgent.", "title": "Model I/O: Processing a maliciously crafted image may lead to a denial-of-service", "description": "This is a vulnerability in open source code and Apple Software is among the affected projects. The", "published": "2024-02-01T19:15:08Z", "severity": "CRITICAL", "cvss": 9.1, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "epss": 0.01248, "epssPercentile": 0.69518, "priority": "Urgent", "priorityTier": 2, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://support.apple.com/en-us/121238", "fixes": [ { "platform": "macos", "product": "Sequoia", "fixedVersion": "15.0", "fix": "Sequoia 15.0", "url": "https://patchblox.com/security/fix/macos/sequoia-15.0", "released": "2024-09-16T00:00:00Z" }, { "platform": "linux", "product": "openexr", "release": "Debian 13.5 (trixie)", "fixedVersion": "3.1.13-1", "fix": "DEBIAN-CVE-2023-5841", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-5841", "released": "2024-02-01T19:15:08Z" }, { "platform": "linux", "product": "openexr", "release": "Debian 14", "fixedVersion": "3.1.13-1", "fix": "DEBIAN-CVE-2023-5841", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-5841", "released": "2024-02-01T19:15:08Z" }, { "platform": "linux", "product": "openexr", "release": "RHEL 9", "fixedVersion": "0:3.1.1-2.el9_5.1", "fix": "RHSA-2024:9548", "url": "https://patchblox.com/security/fix/linux/rhsa-2024-9548", "released": "2024-11-13T00:00:00Z" }, { "platform": "linux", "product": "openexr", "release": "almalinux 9", "fixedVersion": "3.1.1-2.el9_5.1", "fix": "ALSA-2024:9548", "url": "https://patchblox.com/security/fix/linux/alsa-2024-9548", "released": "2024-11-13T00:00:00Z" }, { "platform": "linux", "product": "openexr", "release": "amzn 2023", "fixedVersion": "3.1.5-1.amzn2023.0.4", "fix": "ALAS2023-2024-551", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-551", "released": "2024-02-29T10:29:00Z" }, { "platform": "linux", "product": "openexr", "release": "ol 9", "fixedVersion": "0:3.1.1-2.el9_4.1", "fix": "ELSA-2024-8800", "url": "https://patchblox.com/security/fix/linux/elsa-2024-8800", "released": "2024-11-04T00:00:00Z" }, { "platform": "linux", "product": "openexr", "release": "rocky 9", "fixedVersion": "0:3.1.1-2.el9_4.1", "fix": "RLSA-2024:9548", "url": "https://patchblox.com/security/fix/linux/rlsa-2024-9548", "released": "2024-11-19T16:02:19Z" }, { "platform": "linux", "product": "openexr-debuginfo", "release": "amzn 2023", "fixedVersion": "3.1.5-1.amzn2023.0.4", "fix": "ALAS2023-2024-551", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-551", "released": "2024-02-29T10:29:00Z" }, { "platform": "linux", "product": "openexr-debugsource", "release": "amzn 2023", "fixedVersion": "3.1.5-1.amzn2023.0.4", "fix": "ALAS2023-2024-551", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-551", "released": "2024-02-29T10:29:00Z" }, { "platform": "linux", "product": "openexr-devel", "release": "RHEL 9", "fixedVersion": "0:3.1.1-2.el9_5.1", "fix": "RHSA-2024:9548", "url": "https://patchblox.com/security/fix/linux/rhsa-2024-9548", "released": "2024-11-13T00:00:00Z" }, { "platform": "linux", "product": "openexr-devel", "release": "almalinux 9", "fixedVersion": "3.1.1-2.el9_5.1", "fix": "ALSA-2024:9548", "url": "https://patchblox.com/security/fix/linux/alsa-2024-9548", "released": "2024-11-13T00:00:00Z" }, { "platform": "linux", "product": "openexr-devel", "release": "amzn 2023", "fixedVersion": "3.1.5-1.amzn2023.0.4", "fix": "ALAS2023-2024-551", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-551", "released": "2024-02-29T10:29:00Z" }, { "platform": "linux", "product": "openexr-devel", "release": "ol 9", "fixedVersion": "0:3.1.1-2.el9_4.1", "fix": "ELSA-2024-8800", "url": "https://patchblox.com/security/fix/linux/elsa-2024-8800", "released": "2024-11-04T00:00:00Z" }, { "platform": "linux", "product": "openexr-libs", "release": "RHEL 9", "fixedVersion": "0:3.1.1-2.el9_5.1", "fix": "RHSA-2024:9548", "url": "https://patchblox.com/security/fix/linux/rhsa-2024-9548", "released": "2024-11-13T00:00:00Z" }, { "platform": "linux", "product": "openexr-libs", "release": "almalinux 9", "fixedVersion": "3.1.1-2.el9_5.1", "fix": "ALSA-2024:9548", "url": "https://patchblox.com/security/fix/linux/alsa-2024-9548", "released": "2024-11-13T00:00:00Z" }, { "platform": "linux", "product": "openexr-libs", "release": "amzn 2023", "fixedVersion": "3.1.5-1.amzn2023.0.4", "fix": "ALAS2023-2024-551", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-551", "released": "2024-02-29T10:29:00Z" }, { "platform": "linux", "product": "openexr-libs", "release": "ol 9", "fixedVersion": "0:3.1.1-2.el9_4.1", "fix": "ELSA-2024-8800", "url": "https://patchblox.com/security/fix/linux/elsa-2024-8800", "released": "2024-11-04T00:00:00Z" }, { "platform": "linux", "product": "openexr-libs-debuginfo", "release": "amzn 2023", "fixedVersion": "3.1.5-1.amzn2023.0.4", "fix": "ALAS2023-2024-551", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-551", "released": "2024-02-29T10:29:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T00:53:09Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }