Lucene search
+L

77 matches found

NVD
NVD
•added 2022/08/23 4:15 p.m.•37 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS0.02067EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2022/08/23 4:15 p.m.•59 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7AI score0.02067EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/23 4:15 p.m.•13 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7.1AI score0.02067EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2022/08/23 12:00 a.m.•43 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS7.3AI score0.02067EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/08/23 12:00 a.m.•38 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.4AI score0.02067EPSS
SaveExploits1References6
Mend
Mend
•added 2022/08/23 12:00 a.m.•8 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

8.7CVSS0.02067EPSS
SaveExploits1References8
CVE
CVE
•added 2022/08/23 12:00 a.m.•151 views

CVE-2021-20304

OpenEXR contains a vulnerable hufDecode path (CVE-2021-20304). A crafted EXR file can trigger an undefined right-shift error, with the highest impact on availability. Public advisories document affected OpenEXR components and remediation via vendor patches/upgrades. Notably, Amazon Linux 2 ALAS a...

7.5CVSS7.1AI score0.02067EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/16 12:00 a.m.•17 views

QEMU mode_sense_page Heap Buffer Overflow DoS

The vulnerability of the modesensepage function implementation in the QEMU hardware emulation software is related to a single-shift error when using the “page” parameter. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.2CVSS6.8AI score0.00338EPSS
SaveExploits0References9Affected Software4
Tenable Nessus
Tenable Nessus
•added 2021/10/25 12:00 a.m.•41 views

EulerOS 2.0 SP3 : OpenEXR (EulerOS-SA-2021-2600)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...

7.5CVSS6.8AI score0.02067EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2021/09/27 12:00 a.m.•50 views

EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2021-2514)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...

7.5CVSS6.8AI score0.02067EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2021/09/24 12:00 a.m.•30 views

Huawei EulerOS: Security Advisory for OpenEXR (EulerOS-SA-2021-2477)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.02067EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/08/20 12:00 a.m.•14 views

PT-2022-9180

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description A flaw in OpenEXR's hufDecode functionality allows an attacker to trigger an undefined right shift error by passing a crafted file to be processed by OpenEXR. The highest threat from this iss...

7.5CVSS6.5AI score0.02067EPSS
SaveExploits1References42
RedhatCVE
RedhatCVE
•added 2021/07/14 6:22 p.m.•60 views

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

7.5CVSS1.6AI score0.02067EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2021/05/05 12:00 a.m.•16 views

GateManager communication server Code Execution

The vulnerability of the GateManager communication server is related to a single-shift error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

10CVSS8.1AI score0.02017EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/05 12:00 a.m.•16 views

GateManager Arbitrary Command Execution Root

The vulnerability of the communication server GateManager is related to a single-shift error. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the user root remotely...

10CVSS8.1AI score0.02487EPSS
SaveExploits0References3Affected Software1
osv_debian
osv_debian
•added 2021/03/11 9:15 p.m.•8 views

DEBIAN-CVE-2020-36277

Leptonica before 1.80.0 allows a denial of service application crash via an incorrect left shift in pixConvert2To8 in pixconv.c...

7.5CVSS7.2AI score0.02433EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2016/05/05 1:59 a.m.•14 views

DEBIAN-CVE-2000-1254

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

7.5CVSS7.7AI score0.03137EPSS
SaveExploits0References1
Rows per page
Query Builder