CVE-2018-18443 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-18443 Interim 1 23 2026-03-05T06:38:32Z current 2021-05-30T14:18:02Z 2026-03-05T06:38:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-18443 OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 openSUSE Tumbleweed OpenEXR OpenEXR-32bit OpenEXR-devel libIex-3_1-30-3.1.1-2.2 libIex-3_1-30-32bit-3.1.1-2.2 libIex-3_2-31-3.2.2-160000.2.2 libIex-3_2-31-x86-64-v3-3.2.2-160000.2.2 libIlmImf-2_2-23 libIlmImf-Imf_2_1-21 libIlmImf-Imf_2_1-21-32bit libIlmImfUtil-2_2-23 libIlmThread-3_1-30-3.1.1-2.2 libIlmThread-3_1-30-32bit-3.1.1-2.2 libIlmThread-3_2-31-3.2.2-160000.2.2 libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.2.2 libOpenEXR-3_1-30-3.1.1-2.2 libOpenEXR-3_1-30-32bit-3.1.1-2.2 libOpenEXR-3_2-31-3.2.2-160000.2.2 libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.2.2 libOpenEXRCore-3_1-30-3.1.1-2.2 libOpenEXRCore-3_2-31-3.2.2-160000.2.2 libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.2.2 libOpenEXRUtil-3_1-30-3.1.1-2.2 libOpenEXRUtil-3_1-30-32bit-3.1.1-2.2 libOpenEXRUtil-3_2-31-3.2.2-160000.2.2 libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.2.2 openexr openexr-3.1.1-2.2 openexr-3.2.2-160000.2.2 openexr-devel openexr-devel-3.1.1-2.2 openexr-doc-3.1.1-2.2 openexr-doc-3.2.2-160000.2.2 libIex-3_2-31-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libIex-3_2-31-x86-64-v3-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libIlmThread-3_2-31-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libOpenEXR-3_2-31-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libOpenEXRCore-3_2-31-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libOpenEXRUtil-3_2-31-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 openexr-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 openexr-doc-3.2.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libIex-3_1-30-3.1.1-2.2 as a component of openSUSE Tumbleweed libIex-3_1-30-32bit-3.1.1-2.2 as a component of openSUSE Tumbleweed libIlmThread-3_1-30-3.1.1-2.2 as a component of openSUSE Tumbleweed libIlmThread-3_1-30-32bit-3.1.1-2.2 as a component of openSUSE Tumbleweed libOpenEXR-3_1-30-3.1.1-2.2 as a component of openSUSE Tumbleweed libOpenEXR-3_1-30-32bit-3.1.1-2.2 as a component of openSUSE Tumbleweed libOpenEXRCore-3_1-30-3.1.1-2.2 as a component of openSUSE Tumbleweed libOpenEXRUtil-3_1-30-3.1.1-2.2 as a component of openSUSE Tumbleweed libOpenEXRUtil-3_1-30-32bit-3.1.1-2.2 as a component of openSUSE Tumbleweed openexr-3.1.1-2.2 as a component of openSUSE Tumbleweed openexr-devel-3.1.1-2.2 as a component of openSUSE Tumbleweed openexr-doc-3.1.1-2.2 as a component of openSUSE Tumbleweed OpenEXR as a component of SLES for SAP Applications 11 SP3 libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Desktop 12 SP3 libIlmImf-Imf_2_1-21-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 openexr as a component of SUSE Linux Enterprise Desktop 12 SP3 libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 openexr-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 openexr as a component of SUSE Linux Enterprise Module for Desktop Applications 15 OpenEXR as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata OpenEXR as a component of SUSE Linux Enterprise Server 11 SP3 LTSS OpenEXR as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata OpenEXR as a component of SUSE Linux Enterprise Server 11 SP4-LTSS OpenEXR-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS openexr as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openexr as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server 12 SP3 openexr as a component of SUSE Linux Enterprise Server 12 SP3 libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server 12-LTSS openexr as a component of SUSE Linux Enterprise Server 12-LTSS openexr as a component of SUSE Linux Enterprise Server for SAP Applications 12 libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openexr as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 OpenEXR-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 OpenEXR-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 OpenEXR as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 openexr-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 openexr as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libIlmImf-Imf_2_1-21-32bit as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 openexr as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview. CVE-2018-18443 SUSE Linux Enterprise Server 16.0:libIex-3_2-31-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libIlmThread-3_2-31-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libOpenEXR-3_2-31-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:openexr-3.2.2-160000.2.2 SUSE Linux Enterprise Server 16.0:openexr-doc-3.2.2-160000.2.2 openSUSE Tumbleweed:libIex-3_1-30-3.1.1-2.2 openSUSE Tumbleweed:libIex-3_1-30-32bit-3.1.1-2.2 openSUSE Tumbleweed:libIlmThread-3_1-30-3.1.1-2.2 openSUSE Tumbleweed:libIlmThread-3_1-30-32bit-3.1.1-2.2 openSUSE Tumbleweed:libOpenEXR-3_1-30-3.1.1-2.2 openSUSE Tumbleweed:libOpenEXR-3_1-30-32bit-3.1.1-2.2 openSUSE Tumbleweed:libOpenEXRCore-3_1-30-3.1.1-2.2 openSUSE Tumbleweed:libOpenEXRUtil-3_1-30-3.1.1-2.2 openSUSE Tumbleweed:libOpenEXRUtil-3_1-30-32bit-3.1.1-2.2 openSUSE Tumbleweed:openexr-3.1.1-2.2 openSUSE Tumbleweed:openexr-devel-3.1.1-2.2 openSUSE Tumbleweed:openexr-doc-3.1.1-2.2 SLES for SAP Applications 11 SP3:OpenEXR SUSE Linux Enterprise Desktop 12 SP3:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Desktop 12 SP3:libIlmImf-Imf_2_1-21-32bit SUSE Linux Enterprise Desktop 12 SP3:openexr SUSE Linux Enterprise Module for Desktop Applications 15:libIlmImf-2_2-23 SUSE Linux Enterprise Module for Desktop Applications 15:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Module for Desktop Applications 15:openexr SUSE Linux Enterprise Module for Desktop Applications 15:openexr-devel SUSE Linux Enterprise Server 11 SP1 for Teradata:OpenEXR SUSE Linux Enterprise Server 11 SP3 LTSS:OpenEXR SUSE Linux Enterprise Server 11 SP3 for Teradata:OpenEXR SUSE Linux Enterprise Server 11 SP4-LTSS:OpenEXR SUSE Linux Enterprise Server 11 SP4-LTSS:OpenEXR-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server 12 SP1-LTSS:openexr SUSE Linux Enterprise Server 12 SP2-LTSS:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server 12 SP2-LTSS:openexr SUSE Linux Enterprise Server 12 SP3:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server 12 SP3:openexr SUSE Linux Enterprise Server 12-LTSS:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server 12-LTSS:openexr SUSE Linux Enterprise Server for SAP Applications 12 SP2:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openexr SUSE Linux Enterprise Server for SAP Applications 12:openexr SUSE Linux Enterprise Software Development Kit 11 SP4:OpenEXR SUSE Linux Enterprise Software Development Kit 11 SP4:OpenEXR-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:OpenEXR-devel SUSE Linux Enterprise Software Development Kit 12 SP3:openexr SUSE Linux Enterprise Software Development Kit 12 SP3:openexr-devel SUSE Linux Enterprise Workstation Extension 12 SP3:libIlmImf-Imf_2_1-21-32bit SUSE Linux Enterprise Workstation Extension 12 SP3:openexr low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L