Lucene search
+L

2475 matches found

NVD
NVD
added 2021/08/25 7:15 p.m.22 views

CVE-2021-3605

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

5.5CVSS0.01007EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/25 7:15 p.m.29 views

CVE-2021-3605

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

5.5CVSS6.3AI score
SaveExploits0References4
Prion
Prion
added 2021/08/25 7:15 p.m.30 views

Out-of-bounds

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

4.3CVSS5.7AI score0.01007EPSS
SaveExploits0References4Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/08/25 7:15 p.m.6 views

CVE-2021-3605

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

5.5CVSS5.4AI score0.01007EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2021/08/25 7:15 p.m.36 views

CVE-2021-3605

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

5.5CVSS3.6AI score0.01007EPSS
SaveExploits0
CVE
CVE
added 2021/08/25 12:0 a.m.265 views

CVE-2021-3605

CVE-2021-3605 describes a flaw in OpenEXR's rleUncompress function in versions prior to 3.0.5 that could allow an attacker to submit a crafted file to an application linked with OpenEXR, causing an out-of-bounds read with the greatest impact on availability. Multiple connected sources confirm the...

5.5CVSS5.3AI score0.01007EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2021/08/25 12:0 a.m.33 views

CVE-2021-3605

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

5.5CVSS5.7AI score0.01007EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/08/25 12:0 a.m.48 views

CVE-2021-3605

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

5.8AI score0.01007EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/08/23 12:0 a.m.6 views

ILM OpenEXR 缓冲区错误漏洞

Industrial Light and Magic OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images. A security vulnerability exists in Industrial Light and Magic OpenEXR, which can be exploited by an attacker to cause a denial of service. The following products and...

7.5CVSS7.6AI score0.01248EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2021/08/23 12:0 a.m.4 views

ILM OpenEXR 输入验证错误漏洞

Industrial Light and Magic OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images. A security vulnerability exists in Industrial Light and Magic OpenEXR, which can be exploited by an attacker to cause a denial of service. The following products and...

7.5CVSS7.4AI score0.01515EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
added 2021/08/21 12:0 a.m.31 views

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:2793-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2793-1 advisory. - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ...

7.5CVSS6.6AI score0.01848EPSS
SaveExploits1References21
OpenVAS
OpenVAS
added 2021/08/21 12:0 a.m.24 views

openSUSE: Security Advisory for openexr (openSUSE-SU-2021:2793-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.5AI score0.01848EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/08/21 12:0 a.m.41 views

openSUSE 15 Security Update : openexr (openSUSE-SU-2021:2793-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2793-1 advisory. - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed b...

7.5CVSS6.4AI score0.01848EPSS
SaveExploits1References21
OSV
OSV
added 2021/08/20 8:23 a.m.7 views

SUSE-SU-2021:2793-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ in Imf25:Header:operator - CVE-2021-20300 bsc1188458: Fixed Integer-overflow in Imf25:hufUncompress - CVE-2021-20302...

7.5CVSS6.3AI score0.01848EPSS
SaveExploits1References14
OSV
OSV
added 2021/08/20 8:23 a.m.8 views

OPENSUSE-SU-2021:2793-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ in Imf25:Header:operator - CVE-2021-20300 bsc1188458: Fixed Integer-overflow in Imf25:hufUncompress - CVE-2021-20302...

7.5CVSS5.8AI score0.01848EPSS
SaveExploits1References14
OpenVAS
OpenVAS
added 2021/08/20 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2021:2793-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.01848EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2021/08/20 12:0 a.m.5 views

PT-2022-9180 · Openexr +1 · Openexr +1

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw in OpenEXR's hufDecode functionality allows an attacker to trigger an undefined right shift error by passing a crafted file to be processed by OpenEXR. The highest threat from this...

7.5CVSS6AI score0.01848EPSS
SaveExploits1References54
OPENSUSE Linux
OPENSUSE Linux
added 2021/08/20 12:0 a.m.85 views

Security update for openexr (important)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:2793-1 Rating: important References: 1188457 1188458 1188459 1188460 1188461 1188462 Cross-References: CVE-2021-20298 CVE-2021-20299 CVE-2021-20300 CVE-2021-20302 CVE-2021-20303 CVE-2021-20304 CVE-2021-3476 CV...

7.5CVSS6.3AI score0.01848EPSS
SaveExploits1References6
CNVD
CNVD
added 2021/08/07 12:0 a.m.39 views

Industrial Light and Magic OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19852)

OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM, Inc. A buffer overflow vulnerability exists in Industrial Light and Magic OpenEXR, which stems from the product's Imf25:: copyIntoFrameBuffer contains a heap buffer overflow, which can be...

6.1CVSS3.4AI score0.00822EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/08/06 11:44 a.m.5 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An attacker who can submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read, leading to an application crash...

5.5CVSS6.3AI score0.01007EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder