Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2023-3430
CVE-2023-3430:
NixOS vulnerability analysis and mitigation
Overview
A heap buffer overflow vulnerability (CVE-2023-3430) was discovered in OpenImageIO's src/gif.imageio/gifinput.cpp file. The vulnerability was disclosed on December 18, 2023, affecting OpenImageIO version 2.4.11 and earlier versions. This security flaw received a CVSS v3.1 base score of 7.5 (High) (Red Hat, NVD).
Technical details
The vulnerability exists in the GIFInput::read_subimage_data() function within the src/gif.imageio/gifinput.cpp file. The flaw manifests as a heap-based buffer overflow condition that occurs when processing specially crafted GIF files. The issue has been classified as CWE-787 (Out-of-bounds Write) by NIST and CWE-122 (Heap-based Buffer Overflow) by Red Hat (NVD).
Impact
When exploited, this vulnerability can allow a remote attacker to trigger a heap-based buffer overflow by passing a specially crafted file to the application. This can result in application crashes, leading to denial of service conditions (NVD).
Mitigation and workarounds
The vulnerability has been fixed in OpenImageIO version 2.4.12.0. Users are advised to upgrade to this version or later to address the security issue (Debian Tracker).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management