Lucene search
K

34 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в openexr

There is a flaw in OpenEXR in versions before 3.0.0-beta. A carefully crafted input file processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to issues with the application’s functionality...

5.3CVSS6.9AI score0.01848EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-26796

Malware in sbrugna...

5.3CVSS5.6AI score0.01848EPSS
Exploits0References10
SUSE CVE
SUSE CVE
added 2023/02/15 3:49 a.m.1 views

SUSE CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS7.1AI score0.01848EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.5 views

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images in OpenEXR format with a wide dynamic range of brightness levels, related to reading data beyond the buffer’s acceptable limits, allows attackers to cause service interruptions.

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images with wide dynamic range brightness in the OpenEXR format is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause...

6.5CVSS6.9AI score0.01785EPSS
Exploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.5 views

The vulnerability of the FastHufDecoder function in the OpenEXR library, which allows a hacker to cause a service failure

The vulnerability of the FastHufDecoder function in the OpenEXR library is related to integer overflow during the processing of input files. Exploiting this vulnerability can allow a malicious actor to cause service failures by creating specially crafted EXR files...

5.3CVSS6.8AI score0.01848EPSS
Exploits0References15Affected Software8
Tenable Nessus
Tenable Nessus
added 2021/04/12 12:0 a.m.36 views

openSUSE Security Update : openexr (openSUSE-2021-536)

This update for openexr fixes the following issues : - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 This update was importe...

5.3CVSS6.2AI score0.01848EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2021/04/08 12:0 a.m.35 views

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:1097-1)

This update for openexr fixes the following issues : CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 Note that Tenable Network...

5.3CVSS6.2AI score0.01848EPSS
Exploits0References10
Veracode
Veracode
added 2021/04/05 7:36 a.m.28 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder...

5.3CVSS3.2AI score0.01848EPSS
Exploits0References6Affected Software5
CNVD
CNVD
added 2021/03/31 12:0 a.m.6 views

LIM OpenEXR Shift Overflow Vulnerability

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A shift overflow vulnerability exists in FastHufDecoder in versions prior to LIM OpenEXR 3.0.0-beta, which...

5.3CVSS6.6AI score0.01848EPSS
Exploits0References1
NVD
NVD
added 2021/03/30 6:15 p.m.19 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS0.01848EPSS
Exploits0References5
OSV
OSV
added 2021/03/30 6:15 p.m.4 views

AZL-44640 CVE-2021-3474 affecting package OpenEXR 2.3.0-6

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.8AI score0.01848EPSS
Exploits0References1
OSV
OSV
added 2021/03/30 6:15 p.m.1 views

DEBIAN-CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS7.1AI score0.01848EPSS
Exploits0References1
OSV
OSV
added 2021/03/30 6:15 p.m.28 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.7AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2021/03/30 6:15 p.m.27 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.9AI score0.01848EPSS
Exploits0References2
Prion
Prion
added 2021/03/30 6:15 p.m.31 views

Design/Logic Flaw

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5CVSS5.4AI score0.01848EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2021/03/30 6:15 p.m.0 views

UBUNTU-CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.8AI score0.01848EPSS
Exploits0References3
CVE
CVE
added 2021/03/30 12:0 a.m.229 views

CVE-2021-3474

OpenEXR vulnerability CVE-2021-3474 affects OpenEXR versions before 3.0.0-beta. A crafted EXR file can trigger a shift overflow in FastHufDecoder, leading to availability impact (DoS) for affected applications. The connected documents confirm the flaw and mention mitigation via upgrading to 3.0.0...

5.3CVSS5.5AI score0.01848EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2021/03/30 12:0 a.m.35 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

6AI score0.01848EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2021/03/30 12:0 a.m.35 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.2AI score0.01848EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/03/30 12:0 a.m.49 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS5.8AI score0.01848EPSS
Exploits0
Rows per page
Query Builder