Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c2vj-fxvp-674h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

EPSS

Процентиль: 63%
0.00454
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-119
CWE-125

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 4 лет назад

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

CVSS3: 5.5
redhat
больше 4 лет назад

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

CVSS3: 5.5
nvd
больше 4 лет назад

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

CVSS3: 5.5
debian
больше 4 лет назад

There's a flaw in OpenEXR's rleUncompress functionality in versions pr ...

CVSS3: 5.5
fstec
больше 4 лет назад

Уязвимость функции RleUncompress() библиотеки OpenEXR, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 63%
0.00454
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-119
CWE-125