Lucene search
+L

83 matches found

Tenable Nessus
Tenable Nessus
added 2021/07/03 12:0 a.m.63 views

Debian DLA-2701-1 : openexr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2701 advisory. - A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can...

5.5CVSS6.4AI score0.01848EPSS
Exploits2References26
Veracode
Veracode
added 2021/04/05 7:36 a.m.31 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder...

5.3CVSS3.2AI score0.01848EPSS
Exploits0References6Affected Software5
CNVD
CNVD
added 2021/03/31 12:0 a.m.8 views

LIM OpenEXR Input Validation Error Vulnerability

Industrial Light And Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in OpenEXR B44 uncompression, which can be exploited by an attacker to trigger a shift overflow and potentiall...

5.3CVSS6.7AI score0.01848EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/31 12:0 a.m.6 views

LIM OpenEXR Shift Overflow Vulnerability

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A shift overflow vulnerability exists in FastHufDecoder in versions prior to LIM OpenEXR 3.0.0-beta, which...

5.3CVSS6.6AI score0.01848EPSS
Exploits0References1
OSV
OSV
added 2021/03/30 6:15 p.m.1 views

DEBIAN-CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS7.1AI score0.01848EPSS
Exploits0References1
OSV
OSV
added 2021/03/30 6:15 p.m.31 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.7AI score
Exploits0References5
NVD
NVD
added 2021/03/30 6:15 p.m.21 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS0.01848EPSS
Exploits0References5
OSV
OSV
added 2021/03/30 6:15 p.m.8 views

AZL-44640 CVE-2021-3474 affecting package OpenEXR 2.3.0-6

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.8AI score0.01848EPSS
Exploits0References1
OSV
OSV
added 2021/03/30 6:15 p.m.6 views

UBUNTU-CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.8AI score0.01848EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/30 6:15 p.m.4 views

CVE-2021-3476

A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability...

5.3CVSS6.6AI score0.01848EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2021/03/30 6:15 p.m.34 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.9AI score0.01848EPSS
Exploits0References2
Prion
Prion
added 2021/03/30 6:15 p.m.32 views

Design/Logic Flaw

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5CVSS5.4AI score0.01848EPSS
Exploits0References5Affected Software2
CNNVD
CNNVD
added 2021/03/30 12:0 a.m.7 views

LIM OpenEXR 输入验证错误漏洞

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A shift overflow vulnerability exists in FastHufDecoder in versions prior to LIM OpenEXR 3.0.0-beta, which...

5.3CVSS5.7AI score0.01848EPSS
Exploits0References13
CVE
CVE
added 2021/03/30 12:0 a.m.250 views

CVE-2021-3476

OpenEXR CVE-2021-3476 affects the B44 uncompression in OpenEXR prior to 3.0.0-beta. A crafted EXR file can trigger shift overflows, potentially causing denial of service and affecting availability. The provided documents consistently describe this as a vulnerability in the OpenEXR library (B44 un...

5.3CVSS5.2AI score0.01848EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2021/03/30 12:0 a.m.238 views

CVE-2021-3474

OpenEXR vulnerability CVE-2021-3474 affects OpenEXR versions before 3.0.0-beta. A crafted EXR file can trigger a shift overflow in FastHufDecoder, leading to availability impact (DoS) for affected applications. The connected documents confirm the flaw and mention mitigation via upgrading to 3.0.0...

5.3CVSS5.5AI score0.01848EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2021/03/30 12:0 a.m.41 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

6AI score0.01848EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2021/03/30 12:0 a.m.45 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS6.2AI score0.01848EPSS
Exploits0
CNNVD
CNNVD
added 2021/03/30 12:0 a.m.6 views

LIM OpenEXR 输入验证错误漏洞

Industrial Light And Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in OpenEXR B44 uncompression, which can be exploited by an attacker to trigger a shift overflow and potentiall...

5.3CVSS5.9AI score0.01848EPSS
Exploits0References14
AlpineLinux
AlpineLinux
added 2021/03/30 12:0 a.m.88 views

CVE-2021-3474

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS5.8AI score0.01848EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2021/03/29 7:45 p.m.35 views

CVE-2021-3474

There's a flaw in OpenEXR. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability...

5.3CVSS3.4AI score0.01848EPSS
Exploits0References4
Rows per page
Query Builder