Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-20302

Опубликовано: 04 мар. 2022
Источник: nvd
CVSS3: 5.5
CVSS2: 7.1
EPSS Низкий

Описание

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*
Версия до 2.5.4 (исключая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 67%
0.00536
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.

CVSS3: 5.3
redhat
почти 5 лет назад

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.

CVSS3: 5.5
debian
почти 4 года назад

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw ...

CVSS3: 5.5
github
почти 4 года назад

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.

CVSS3: 5.3
fstec
больше 5 лет назад

Уязвимость функционала TiledInputFile программного обеспечения для хранения изображений с широкими динамическими диапазоном яркости OpenEXR, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 67%
0.00536
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-20
NVD-CWE-noinfo