Lucene search

[email protected]CVE-2021-46389

HistoryFeb 07, 2022 - 2:15 p.m.

CVE-2021-46389

2022-02-0714:15:07

CWE-190

[email protected]

web.nvd.nist.gov

cve-2021-46389

iipimage

high resolution

streaming

image server

integer overflow

iipsrv.fcgi

http

query parameters

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

39.2%

JSON

IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters.

Affected configurations

NVD

Node

high_resolution_streaming_image_server_projecthigh_resolution_streaming_image_serverRange<2022-01-14

CPENameOperatorVersion
high_resolution_streaming_image_server_project:high_resolution_streaming_image_serverhigh resolution streaming image server project high resolution streaming image serverlt2022-01-14

CPE	Name	Operator	Version
high_resolution_streaming_image_server_project:high_resolution_streaming_image_server	high resolution streaming image server project high resolution streaming image server	lt	2022-01-14

References

github.com/ruven/iipsrv/commit/4ed59265fbbd636dc2fbbf325f8ea37ed300a6d9

github.com/ruven/iipsrv/commit/882925b295a80ec992063deffc2a3b0d803c3195

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

39.2%

JSON

Related for CVE-2021-46389

prion1 nvd1 packetstorm1 zdt1 cvelist1 osv1