CVE-2021-45942

🗓️ 31 Dec 2021 00:00:00Reported by mitreType

cvelist

cvelist🔗 www.cve.org👁 37 Views

OpenEXR 3.1.x heap-based buffer overflow in Imf_3_1::LineCompositeTask::execut

Reporter	Title	Published	Views	Family All 87
ATTACKERKB	CVE-2021-45942	1 Jan 202201:15	–	attackerkb
AlpineLinux	CVE-2021-45942	31 Dec 202100:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in openexr	20 May 202605:53	–	astralinux
FreeBSD	OpenEXR -- Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute	26 Nov 202100:00	–	freebsd
BDU FSTEC	The vulnerability of the Imf_3_1::LineCompositeTask::execute function in the OpenEXR library allows a hacker to trigger a buffer overflow.	10 Feb 202200:00	–	bdu_fstec
Circl	CVE-2021-45942	1 Jan 202207:36	–	circl
CNNVD	ILM OpenEXR 缓冲区错误漏洞	1 Jan 202200:00	–	cnnvd
CNVD	ILM OpenEXR Buffer Overflow Vulnerability	5 Jan 202200:00	–	cnvd
CVE	CVE-2021-45942	31 Dec 202100:00	–	cve
Debian	[SECURITY] [DLA 3236-1] openexr security update	11 Dec 202223:52	–	debian

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJUK7WIQV5EKWTCZBRXFN6INHG6MLS5O/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6TEZDE2S2DB4BF4LZSSV4W3DNW7DSRHJ/
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00022.html
github	www.github.com/AcademySoftwareFoundation/openexr/commit/db217f29dfb24f6b4b5100c24ac5e7490e1c57d0
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HJ5PW4WNXBKCRFGDZGAQOSVH2BKZKL4X/
github	www.github.com/AcademySoftwareFoundation/openexr/blob/v3.1.4/CHANGES.md
security	www.security.gentoo.org/glsa/202210-31
github	www.github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2021-1627.yaml
bugs	www.bugs.chromium.org/p/oss-fuzz/issues/detail
debian	www.debian.org/security/2022/dsa-5299

12 Dec 2022 00:00Current

6.3Medium risk

Vulners AI Score6.3

EPSS0.01772

openexr 3.1.x buffer overflow linecompositetask