Lucene search
+L

343 matches found

Mageia
Mageia
added 2021/12/10 10:19 p.m.36 views

Updated curaengine packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS2.3AI score0.01463EPSS
SaveExploits2References2
OSV
OSV
added 2021/12/10 10:19 p.m.12 views

MGASA-2021-0549 Updated curaengine packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS6.4AI score0.01463EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2021/12/05 12:00 a.m.17 views

Fedora: Security Advisory for pfstools (FEDORA-2021-b58af96f33)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.5AI score0.00719EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/11/16 12:00 a.m.9 views

PT-2021-8153 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the net/mlx5e component of the Linux kernel, specifically with the CT clear action offload. When a flow includes encap action, a neigh update event can...

8.4CVSS6.5AI score0.08555EPSS
SaveExploits2References1347
OpenVAS
OpenVAS
added 2021/11/14 12:00 a.m.7 views

Fedora: Security Advisory for pfstools (FEDORA-2021-df1fa3d3e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2021/11/12 12:38 a.m.19 views

[SECURITY] Fedora 35 Update: pfstools-2.1.0-21.fc35

pfstools is a set of command line programs for reading, writing, manipulating and viewing high-dynamic range HDR images and video frames. All programs in the package exchange data using unix pipes and a simple generic HDR image format pfs. The concept of the pfstools is similar to netpbm package...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2021/10/27 5:20 p.m.43 views

CVE-2021-42715

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

6.2CVSS2.9AI score0.013EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/10/25 12:00 a.m.58 views

stb stb_image.h has an unspecified vulnerability

stb is a single-file public domain library for C/C. stbimage.h is one of the image loaders. stb stbimage.h contains a security vulnerability that stems from the HDR loader parsing truncated file-tailed RLE scan lines into an infinitely long zero-length sequence. An attacker could cause a denial o...

5.5CVSS2.4AI score0.013EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/21 7:15 p.m.17 views

CVE-2021-42715

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

5.5CVSS0.013EPSS
SaveExploits0References12
OSV
OSV
added 2021/10/21 7:15 p.m.18 views

CVE-2021-42715

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

5.5CVSS7.5AI score
SaveExploits0References12
Prion
Prion
added 2021/10/21 7:15 p.m.25 views

Code injection

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

4.3CVSS6.1AI score0.013EPSS
SaveExploits0References12Affected Software3
UbuntuCve
UbuntuCve
added 2021/10/21 7:15 p.m.31 views

CVE-2021-42715

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

5.5CVSS6.5AI score0.013EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/21 7:15 p.m.7 views

CVE-2021-42715

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

5.5CVSS6.5AI score0.013EPSS
SaveExploits0References22
Debian CVE
Debian CVE
added 2021/10/21 12:00 a.m.58 views

CVE-2021-42715

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

5.5CVSS5.6AI score0.013EPSS
SaveExploits0
CVE
CVE
added 2021/10/21 12:00 a.m.124 views

CVE-2021-42715

The CVE-2021-42715 issue concerns the HDR loader in the libstb component (stb_image.h) versions 1.33 through 2.27, where truncated end-of-file RLE scanlines are parsed as an infinite sequence of zero-length runs. This can allow a crafted HDR file to cause denial of service in applications using s...

5.5CVSS6AI score0.013EPSS
SaveExploits0References12Affected Software1
Cvelist
Cvelist
added 2021/10/21 12:00 a.m.45 views

CVE-2021-42715

An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...

6.5AI score0.013EPSS
SaveExploits0References12
OSV
OSV
added 2021/08/25 8:44 p.m.57 views

GHSA-M2PF-HPRP-3VQM Use after free in image

Affected versions of this crate would call Vec::setlen on an uninitialized vector with user-provided type parameter, in an interface of the HDR image format decoder. They would then also call other code that could panic before initializing all instances. This could run Drop implementations on...

9.8CVSS9.6AI score0.02478EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:44 p.m.31 views

Use after free in image

Affected versions of this crate would call Vec::setlen on an uninitialized vector with user-provided type parameter, in an interface of the HDR image format decoder. They would then also call other code that could panic before initializing all instances. This could run Drop implementations on...

9.8CVSS9.2AI score0.02478EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2021/08/07 12:00 a.m.44 views

Industrial Light and Magic OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19852)

OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM, Inc. A buffer overflow vulnerability exists in Industrial Light and Magic OpenEXR, which stems from the product's Imf25:: copyIntoFrameBuffer contains a heap buffer overflow, which can be...

6.1CVSS3.4AI score0.00822EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/08/05 12:00 a.m.38 views

Industrial Light And Magic OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19853)

OpenEXR is an image file format developed by Industrial Light and Magic LIM for high dynamic range HDR images. Industrial Light And Magic OpenEXR suffers from a buffer overflow vulnerability that stems from OpenEXR incorrectly handling certain formatted An attacker could exploit this vulnerabilit...

5.5CVSS2.6AI score0.01007EPSS
SaveExploits0References1
Rows per page
Query Builder