Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-20300

Опубликовано: 04 мар. 2022
Источник: nvd
CVSS3: 5.5
CVSS2: 7.1
EPSS Низкий

Описание

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*
Версия до 2.5.4 (исключая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 60%
0.00395
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-190
CWE-190

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.

CVSS3: 5.3
redhat
почти 5 лет назад

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.

CVSS3: 5.5
debian
почти 4 года назад

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/I ...

CVSS3: 5.5
github
почти 4 года назад

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.

CVSS3: 5.3
fstec
больше 5 лет назад

Уязвимость функции hufUncompress компонента /IlmImf/ImfHuf.cpp программного обеспечения для хранения изображений с широкими динамическими диапазоном яркости OpenEXR, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 60%
0.00395
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-190
CWE-190