Lucene search
+L

3307 matches found

Veracode
Veracode
•added 2021/04/05 7:36 a.m.•41 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory...

5.5CVSS3.4AI score0.0096EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/04/05 7:36 a.m.•41 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory...

5.5CVSS3.4AI score0.0096EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/04/05 7:36 a.m.•26 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta, that could trigger an integer overflow, subsequently leading to an out-of-bounds read...

5.5CVSS4.4AI score0.0096EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/04/05 7:36 a.m.•33 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. It is due to a flaw found in OpenEXR's B44 uncompression functionality, allowing to submit a crafted file to OpenEXR to trigger shift overflows which potentially affecting application availability...

5.3CVSS3.1AI score0.01848EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/04/05 7:36 a.m.•31 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted file to be processed by OpenEXR that causes an integer overflow...

5.3CVSS3.8AI score0.01848EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/04/05 7:36 a.m.•41 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder...

5.3CVSS3.2AI score0.01848EPSS
SaveExploits0References6Affected Software5
CNVD
CNVD
•added 2021/04/02 12:00 a.m.•83 views

LIM OpenEXR Null Pointer Dereference Vulnerability

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A null pointer dereference vulnerability exists in the Dwa decompression function of the IlmImf library in...

5.3CVSS6.4AI score0.01747EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/04/02 12:00 a.m.•34 views

Ubuntu: Security Advisory (USN-4900-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.01848EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2021/04/01 5:33 p.m.•128 views

USN-4900-1: OpenEXR vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

5.5CVSS6.4AI score0.01848EPSS
SaveExploits0
osv_usn
osv_usn
•added 2021/04/01 5:33 p.m.•14 views

USN-4900-1 openexr vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

5.5CVSS5.8AI score0.01848EPSS
SaveExploits0References7
NVD
NVD
•added 2021/04/01 2:15 p.m.•27 views

CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS0.01747EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2021/04/01 2:15 p.m.•30 views

CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.3AI score
SaveExploits0References5
osv_azl
osv_azl
•added 2021/04/01 2:15 p.m.•21 views

AZL-44505 CVE-2021-20296 affecting package OpenEXR 2.3.0-6

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.2AI score0.01747EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2021/04/01 2:15 p.m.•4 views

DEBIAN-CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.5AI score0.01747EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2021/04/01 2:15 p.m.•17 views

UBUNTU-CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.7AI score0.01747EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/04/01 2:15 p.m.•13 views

CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.5AI score0.01747EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2021/04/01 2:15 p.m.•54 views

CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.8AI score0.01747EPSS
SaveExploits0References4
Prion
Prion
•added 2021/04/01 2:15 p.m.•33 views

Null pointer dereference

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5CVSS5.2AI score0.01747EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
•added 2021/04/01 12:00 a.m.•26 views

LIM OpenEXR integer overflow vulnerability (CNVD-2021-25720)

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. An integer overflow vulnerability in the deep block sample size calculation in versions prior to LIM OpenEX...

5.5CVSS6.8AI score0.0096EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/01 12:00 a.m.•18 views

LIM OpenEXR Denial of Service Vulnerability (CNVD-2021-25721)

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A denial of service vulnerability exists in the Scanline input file feature in versions prior to LIM OpenEX...

5.5CVSS6.5AI score0.0096EPSS
SaveExploits0References1
Rows per page
Query Builder