Lucene search
+L

2475 matches found

OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2018:0585-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.02001EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2021/04/16 12:0 a.m.24 views

openSUSE: Security Advisory for openexr (openSUSE-SU-2021:0536-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS5.9AI score0.01848EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.8 views

The vulnerability of the Scanline API interface in the OpenEXR library allows a hacker to trigger a service failure.

The vulnerability of the Scanline API interface of the OpenEXR library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure by creating specially crafted EXR files...

5.5CVSS6.7AI score0.01EPSS
SaveExploits0References16Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.12 views

The vulnerability of the B44 data compression function (OpenEXR/IlmImf/ImfB44Compressor.cpp) in the OpenEXR library allows a hacker to trigger a service failure.

The vulnerability of the B44 data compression function OpenEXR/IlmImf/ImfB44Compressor.cpp in the OpenEXR library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures by creating specially crafted EXR files...

5.3CVSS6.8AI score0.01848EPSS
SaveExploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.13 views

The vulnerability of the FastHufDecoder function in the OpenEXR library, which allows a hacker to cause a service failure

The vulnerability of the FastHufDecoder function in the OpenEXR library is related to integer overflow during the processing of input files. Exploiting this vulnerability can allow a malicious actor to cause service failures by creating specially crafted EXR files...

5.3CVSS6.8AI score0.01848EPSS
SaveExploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.12 views

The vulnerability of the implementation of the file compression method using Zip scanning per scanline (ImfScanLineInputFile.cpp) in the OpenEXR library allows a hacker to cause a service failure.

The vulnerability of the Zip file compression method implemented using the scanline parameter ImfScanLineInputFile.cpp in the OpenEXR library is related to an uncontrolled resource consumption when processing the todata-linesInBuffer parameter. Exploiting this vulnerability could allow an attacke...

5.5CVSS6.7AI score0.0096EPSS
SaveExploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.9 views

Vulnerability of the DeepTiledInputFile::initialize() function (src/lib/OpenEXR/ImfDeepTiledInputFile.cpp) in the OpenEXR library, which allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the DeepTiledInputFile::initialize function located in src/lib/OpenEXR/ImfDeepTiledInputFile.cpp in the OpenEXR library is related to integer overflow when processing input files. Exploiting this vulnerability can allow an attacker to cause a service failure or execute...

5.5CVSS7.2AI score0.0096EPSS
SaveExploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.10 views

The vulnerability of the calculateNumTiles() function (OpenEXR/IlmImf/ImfTiledMisc.cpp) in the OpenEXR library, which allows a hacker to trigger a service failure.

The vulnerability of the calculateNumTiles function OpenEXR/IlmImf/ImfTiledMisc.cpp in the OpenEXR library is related to integer overflow when processing input files. Exploiting this vulnerability can allow a malicious actor to cause service failures by creating specially crafted EXR files...

5.3CVSS6.8AI score0.01848EPSS
SaveExploits0References15Affected Software8
Tenable Nessus
Tenable Nessus
added 2021/04/12 12:0 a.m.37 views

openSUSE Security Update : openexr (openSUSE-2021-536)

This update for openexr fixes the following issues : - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 This update was importe...

5.3CVSS6.2AI score0.01848EPSS
SaveExploits0References6
OPENSUSE Linux
OPENSUSE Linux
added 2021/04/11 12:0 a.m.32 views

Security update for openexr (moderate)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:0536-1 Rating: moderate References: 1184172 1184173 1184174 Cross-References: CVE-2021-3474 CVE-2021-3475 CVE-2021-3476 CVSS scores: CVE-2021-3474 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L...

5.3CVSS6.3AI score0.01848EPSS
SaveExploits0References3
OSV
OSV
added 2021/04/10 10:5 p.m.5 views

OPENSUSE-SU-2021:0536-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 This update was imported...

5.3CVSS5.6AI score0.01848EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/04/08 12:0 a.m.35 views

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:1097-1)

This update for openexr fixes the following issues : CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 Note that Tenable Network...

5.3CVSS6.2AI score0.01848EPSS
SaveExploits0References10
OSV
OSV
added 2021/04/07 4:6 p.m.6 views

SUSE-SU-2021:1097-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172...

5.3CVSS6AI score0.01848EPSS
SaveExploits0References7
Veracode
Veracode
added 2021/04/05 7:36 a.m.34 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory...

5.5CVSS3.4AI score0.01EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
added 2021/04/05 7:36 a.m.34 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory...

5.5CVSS3.4AI score0.0096EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
added 2021/04/05 7:36 a.m.22 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta, that could trigger an integer overflow, subsequently leading to an out-of-bounds read...

5.5CVSS4.4AI score0.0096EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
added 2021/04/05 7:36 a.m.26 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. It is due to a flaw found in OpenEXR's B44 uncompression functionality, allowing to submit a crafted file to OpenEXR to trigger shift overflows which potentially affecting application availability...

5.3CVSS3.1AI score0.01848EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
added 2021/04/05 7:36 a.m.27 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted file to be processed by OpenEXR that causes an integer overflow...

5.3CVSS3.8AI score0.01848EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
added 2021/04/05 7:36 a.m.32 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder...

5.3CVSS3.2AI score0.01848EPSS
SaveExploits0References6Affected Software5
CNVD
CNVD
added 2021/04/02 12:0 a.m.14 views

LIM OpenEXR Null Pointer Dereference Vulnerability

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A null pointer dereference vulnerability exists in the Dwa decompression function of the IlmImf library in...

5.3CVSS6.4AI score0.01747EPSS
SaveExploits0References1
Rows per page
Query Builder