CVE-2021-26260

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR. An attacker could use this flaw to crash an application compiled with OpenEXR...

CVE-2021-23215

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR. An attacker could use this flaw to crash an application compiled with OpenEXR...

SUSE: Security Advisory (SUSE-SU-2019:2014-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1292-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1984-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:1962-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3931-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0585-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for openexr (openSUSE-SU-2021:0536-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OpenEXR Zip DoS

The vulnerability of the Zip file compression method implemented using the scanline parameter ImfScanLineInputFile.cpp in the OpenEXR library is related to an uncontrolled resource consumption when processing the todata-linesInBuffer parameter. Exploiting this vulnerability could allow an attacke...

OpenEXR DeepTiledInputFile Heap Buffer Overflow DoS

The vulnerability of the DeepTiledInputFile::initialize function located in src/lib/OpenEXR/ImfDeepTiledInputFile.cpp in the OpenEXR library is related to integer overflow when processing input files. Exploiting this vulnerability can allow an attacker to cause a service failure or execute...

OpenEXR B44 Compressor DoS

The vulnerability of the B44 data compression function OpenEXR/IlmImf/ImfB44Compressor.cpp in the OpenEXR library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures by creating specially crafted EXR files...

OpenEXR Scanline API DoS

The vulnerability of the Scanline API interface of the OpenEXR library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure by creating specially crafted EXR files...

OpenEXR calculateNumTiles() DoS

The vulnerability of the calculateNumTiles function OpenEXR/IlmImf/ImfTiledMisc.cpp in the OpenEXR library is related to integer overflow when processing input files. Exploiting this vulnerability can allow a malicious actor to cause service failures by creating specially crafted EXR files...

OpenEXR FastHufDecoder Buffer Overflow DoS

The vulnerability of the FastHufDecoder function in the OpenEXR library is related to integer overflow during the processing of input files. Exploiting this vulnerability can allow a malicious actor to cause service failures by creating specially crafted EXR files...

openSUSE Security Update : openexr (openSUSE-2021-536)

This update for openexr fixes the following issues : - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 This update was importe...

Security update for openexr (moderate)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:0536-1 Rating: moderate References: 1184172 1184173 1184174 Cross-References: CVE-2021-3474 CVE-2021-3475 CVE-2021-3476 CVSS scores: CVE-2021-3474 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L...

OPENSUSE-SU-2021:0536-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 This update was imported...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:1097-1)

This update for openexr fixes the following issues : CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 Note that Tenable Network...

SUSE-SU-2021:1097-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172...