deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-20352
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194710; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/194710
CVE: CVE-2021-20447
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196623; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/196623
CVE: CVE-2021-20502
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198059; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/198059
CVE: CVE-2021-20503
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198182; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/198182
CVE: CVE-2021-20504
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198231; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/198231
CVE: CVE-2021-20506
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198233; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/198233
CVE: CVE-2021-20518
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198437; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/198437
CVE: CVE-2021-20520
Published: 2021-03-30
Description: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198572; https://www.ibm.com/support/pages/node/6437579; https://exchange.xforce.ibmcloud.com/vulnerabilities/198572
CVE: CVE-2021-21412
Published: 2021-03-30
Description: Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true` option is enabled). PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions do NOT attempt to decrypt values (since GPG only available in non-browser env). However, if GPG encrypted values are used/required: 1. Perform a regex search for `#gpg`-tagged values in the EGF source file/string and check for backtick (\`) chars in the encrypted value string 2. Replace/remove them or skip parsing if present.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78
References: https://github.com/thi-ng/umbrella/blob/develop/packages/egf/CHANGELOG.md#040-2021-03-27; https://github.com/thi-ng/umbrella/commit/88f61656e5f5cfba960013b[PII_REDACTED]efaf243; https://github.com/thi-ng/umbrella/security/advisories/GHSA-rj44-gpjc-29r7
CVE: CVE-2021-26579
Published: 2021-03-30
Description: A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded Cryptographic Key in a product). HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM). Version 1.2103.0 of HPE Unified Data Management (UDM) removes all hard-coded cryptographic keys.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04112en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04112en_us
CVE: CVE-2021-3474
Published: 2021-03-30
Description: There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24831; https://bugzilla.redhat.com/show_bug.cgi?id=1939142; https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html
CVE: CVE-2021-3475
Published: 2021-03-30
Description: There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25297; https://bugzilla.redhat.com/show_bug.cgi?id=1939144; https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html
CVE: CVE-2021-3476
Published: 2021-03-30
Description: A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24787; https://bugzilla.redhat.com/show_bug.cgi?id=1939145; https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html
CVE: CVE-2021-29642
Published: 2021-03-30
Description: GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/lostintangent/gistpad/commit/230b05e8dea8d7ac5aae998bbe0a591d7f081b70; https://vuln.ryotak.me/advisories/7; https://github.com/lostintangent/gistpad/commit/230b05e8dea8d7ac5aae998bbe0a591d7f081b70
CVE: CVE-2020-24391
Published: 2021-03-30
Description: mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-10769.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/mongo-express/mongo-express/commit/3a26b079e7821e0e209c3ee0cc2ae15ad467b91a; https://github.com/mongodb-js/query-parser/issues/16; https://github.com/mongo-express/mongo-express/commit/3a26b079e7821e0e209c3ee0cc2ae15ad467b91a
CVE: CVE-2021-29646
Published: 2021-03-30
Description: An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8.
CVSS Score: 5.5 (MEDIUM)
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0217ed2848e8538bcf9172d97ed2eeb4a26041bb; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/
CVE: CVE-2021-29647
Published: 2021-03-30
Description: An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-909
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50535249f624d0072cd885bcdce4e4b6fb770160; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE: CVE-2021-29648
Published: 2021-03-30
Description: An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-307
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=350a5c4dd2452ea999cc5e1d4a8dbf12de2f97ef; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/
CVE: CVE-2021-29649
Published: 2021-03-30
Description: An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a copy_process() memory leak, related to a lack of cleanup steps in kernel/usermode_driver.c and kernel/bpf/preload/bpf_preload_kern.c, aka CID-f60a85cad677.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f60a85cad677c4f9bb4cadd764f1d106c38c7cf8; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/
CVE: CVE-2021-29650
Published: 2021-03-30
Description: An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf.
CVSS Score: 5.5 (MEDIUM)
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=175e476b8cdf2a4de7432583b49c871345e4f8a1; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE: CVE-2020-24995
Published: 2021-03-30
Description: Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local).
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6f293353c94c7ce200f6e0975ae3de49787f91f; https://trac.ffmpeg.org/ticket/8845; https://trac.ffmpeg.org/ticket/8859
CVE: CVE-2021-21413
Published: 2021-03-30
Description: isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isolate. Reference objects allow access to the underlying reference's full prototype chain. In an environment where the implementer has exposed a Reference instance to an attacker they would be able to use it to acquire a Reference to the nodejs context's Function object. Similar application-specific attacks could be possible by modifying the local prototype of other API objects. Access to NativeModule objects could allow an attacker to load and run native code from anywhere on the filesystem. If combined with, for example, a file upload API this would allow for arbitrary code execution. This is addressed in v4.0.0 through a series of related changes.
CVSS Score: 8.0 (HIGH)
CWE: CWE-913
References: https://github.com/laverdet/isolated-vm/blob/main/CHANGELOG.md#v400; https://github.com/laverdet/isolated-vm/commit/2646e6c1558bac66285daeab54c7d490ed332b15; https://github.com/laverdet/isolated-vm/commit/27151bfecc260e[PII_REDACTED]3880e3b2e6596704
CVE: CVE-2021-28657
Published: 2021-03-31
Description: A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E; https://lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-28172
Published: 2021-03-31
Description: A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the website administrative panel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://dl.packetstormsecurity.net/2010-exploits/simplecollegewebsite10-sqlexec.txt; https://github.com/yunaranyancat/poc-dump/blob/main/simplecollegewebsite/sqli_rce.py; https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html
CVE: CVE-2020-28173
Published: 2021-03-31
Description: Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://dl.packetstormsecurity.net/2010-exploits/simplecollegewebsite10-sqlexec.txt; https://github.com/yunaranyancat/poc-dump/blob/main/simplecollegewebsite/sqli_rce.py; https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html
CVE: CVE-2021-21773
Published: 2021-03-31
Description: An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-131, CWE-754
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1227; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1227
CVE: CVE-2021-21776
Published: 2021-03-31
Description: An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-131, CWE-131
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1232; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1232
CVE: CVE-2021-21782
Published: 2021-03-31
Description: An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-131, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1244; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1244
CVE: CVE-2021-23981
Published: 2021-03-31
Description: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1692832; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://www.mozilla.org/security/advisories/mfsa2021-11/
CVE: CVE-2021-23982
Published: 2021-03-31
Description: Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1677046; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://www.mozilla.org/security/advisories/mfsa2021-11/
CVE: CVE-2021-23983
Published: 2021-03-31
Description: By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 87.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1692684; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://bugzilla.mozilla.org/show_bug.cgi?id=1692684
CVE: CVE-2021-23984
Published: 2021-03-31
Description: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1693664; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://www.mozilla.org/security/advisories/mfsa2021-11/
CVE: CVE-2021-23985
Published: 2021-03-31
Description: If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker (able to make a direct network connection to the victim) to monitor the user's browsing activity and (plaintext) network traffic. This was addressed by providing a visual cue when Devtools has an open network socket. This vulnerability affects Firefox < 87.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1659129; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://bugzilla.mozilla.org/show_bug.cgi?id=1659129
CVE: CVE-2021-23986
Published: 2021-03-31
Description: A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing a same-origin policy bypass by the extension, which should not have cross-origin permissions. This cross-origin request was made without cookies, so the sensitive information disclosed by the violation was limited to local-network resources or resources that perform IP-based authentication. This vulnerability affects Firefox < 87.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1692623; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://bugzilla.mozilla.org/show_bug.cgi?id=1692623
CVE: CVE-2021-23987
Published: 2021-03-31
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1513519%2C1683439%2C1690169%2C1690718; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://www.mozilla.org/security/advisories/mfsa2021-11/
CVE: CVE-2021-23988
Published: 2021-03-31
Description: Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 87.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684994%2C1686653; https://www.mozilla.org/security/advisories/mfsa2021-10/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684994%2C1686653
CVE: CVE-2021-28245
Published: 2021-03-31
Description: PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/M40k1n9/vulner/issues/1; https://github.com/M40k1n9/vulner/issues/1
CVE: CVE-2021-3470
Published: 2021-03-31
Description: A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1943623; https://bugzilla.redhat.com/show_bug.cgi?id=1943623
CVE: CVE-2021-3477
Published: 2021-03-31
Description: There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, subsequently leading to an out-of-bounds read. The greatest risk of this flaw is to application availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-125, CWE-190
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956; https://bugzilla.redhat.com/show_bug.cgi?id=1939159; https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html
CVE: CVE-2021-3478
Published: 2021-03-31
Description: There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory. The greatest impact of this flaw is to system availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409; https://bugzilla.redhat.com/show_bug.cgi?id=1939160; https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html