deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32738
Published: 2021-07-02
Description: js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The `Utils.readChallengeTx` function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the `serverAccountID` has signed the transaction. In js-stellar-sdk before version 8.2.3, the function does not verify that the server has signed the transaction. Applications that also used `Utils.verifyChallengeTxThreshold` or `Utils.verifyChallengeTxSigners` to verify the signatures including the server signature on the challenge transaction are unaffected as those functions verify the server signed the transaction. Applications calling `Utils.readChallengeTx` should update to version 8.2.3, the first version with a patch for this vulnerability, to ensure that the challenge transaction is completely valid and signed by the server creating the challenge transaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-347
References: https://github.com/stellar/js-stellar-sdk/releases/tag/v8.2.3; https://github.com/stellar/js-stellar-sdk/security/advisories/GHSA-6cgh-hjpw-q3gq; https://github.com/stellar/js-stellar-sdk/releases/tag/v8.2.3
CVE: CVE-2021-33889
Published: 2021-07-02
Description: OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metric_len.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0019/FEYE-2021-0019.md; https://github.com/openthread/wpantund/issues/502; https://github.com/openthread/wpantund/releases
CVE: CVE-2021-34807
Published: 2021-07-02
Description: An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0. To exploit the vulnerability, an attacker would need to have obtained a valid zimbra auth token or a valid preauth token. Once the token is obtained, an attacker could redirect a user to any URL via isredirect=1&redirectURL= in conjunction with the token data (e.g., a valid authtoken= value).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P23; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P16
CVE: CVE-2021-35207
Published: 2021-07-02
Description: An issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16. An XSS vulnerability exists in the login component of Zimbra Web Client, in which an attacker can execute arbitrary JavaScript by adding executable JavaScript to the loginErrorCode parameter of the login url.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P23; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P16
CVE: CVE-2021-35208
Published: 2021-07-02
Description: An issue was discovered in ZmMailMsgView.js in the Calendar Invite component in Zimbra Collaboration Suite 8.8.x before 8.8.15 Patch 23. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.sonarsource.com/zimbra-webmail-compromise-via-email; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P23
CVE: CVE-2021-35209
Published: 2021-07-02
Description: An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9.0.0 Patch 16. The value of the X-Host header overwrites the value of the Host header in proxied requests. The value of X-Host header is not checked against the whitelist of hosts Zimbra is allowed to proxy to (the zimbraProxyAllowedDomains setting).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://blog.sonarsource.com/zimbra-webmail-compromise-via-email; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P23
CVE: CVE-2021-34527
Published: 2021-07-02
Description: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability.</p>
<p>In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (<strong>Note</strong>: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ):</p>
<ul>
<li>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint</li>
<li>NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)</li>
<li>UpdatePromptSettings = 0 (DWORD) or not defined (default setting)</li>
</ul>
<p><strong>Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design.</strong></p>
<p>UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also <a href="https://support.microsoft.com/topic/31b91c02-05bc-4ada-a7ea-183b129578a7">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates</a>.</p>
<p>Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.</p>

CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34527; http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html
CVE: CVE-2021-36143
Published: 2021-07-02
Description: ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/projectacrn/acrn-hypervisor/commit/154fe59531c12b82e26d1b24b5531f5066d224f5; https://github.com/projectacrn/acrn-hypervisor/commit/154fe59531c12b82e26d1b24b5531f5066d224f5
CVE: CVE-2021-36144
Published: 2021-07-02
Description: The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/*.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/projectacrn/acrn-hypervisor/pull/6268/commits/dd88504804e186029f845a166dc5c31695e2cca2; https://github.com/projectacrn/acrn-hypervisor/pull/6268/commits/dd88504804e186029f845a166dc5c31695e2cca2
CVE: CVE-2021-36145
Published: 2021-07-02
Description: The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/projectacrn/acrn-hypervisor/pull/6058/commits/f880086ffe5423e67d968c8f8f[PII_REDACTED]82ce; https://github.com/projectacrn/acrn-hypervisor/pull/6058/commits/f880086ffe5423e67d968c8f8f[PII_REDACTED]82ce
CVE: CVE-2021-36146
Published: 2021-07-02
Description: ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/projectacrn/acrn-hypervisor/pull/6173/commits/330359921e2e4c2f3f3a10b5bab86942d63c4428; https://github.com/projectacrn/acrn-hypervisor/pull/6173/commits/330359921e2e4c2f3f3a10b5bab86942d63c4428
CVE: CVE-2021-36147
Published: 2021-07-02
Description: An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL pointer dereference for vq->used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/projectacrn/acrn-hypervisor/pull/6121/commits/131116b15b0e35a62085d23686b43ed1c12c1331; https://github.com/projectacrn/acrn-hypervisor/pull/6121/commits/131116b15b0e35a62085d23686b43ed1c12c1331
CVE: CVE-2021-36148
Published: 2021-07-02
Description: An issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an irte_alloc_bitmap buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/projectacrn/acrn-hypervisor/commit/25c0e3817eb332660dd63d1d4522e63dcc94e79a; https://github.com/projectacrn/acrn-hypervisor/commit/25c0e3817eb332660dd63d1d4522e63dcc94e79a
CVE: CVE-2021-33192
Published: 2021-07-05
Description: A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.apache.org/thread.html/r684d8943d755a96fe90f8cd8df196737b6bde3f2b74e15a9bd479975%40%3Cusers.jena.apache.org%3E; https://lists.apache.org/thread.html/r684d8943d755a96fe90f8cd8df196737b6bde3f2b74e15a9bd479975%40%3Cusers.jena.apache.org%3E
CVE: CVE-2021-23401
Published: 2021-07-05
Description: This affects all versions of package Flask-User. When using the make_safe_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as /////evil.com/path or \\\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/lingthio/Flask-User; https://github.com/lingthio/Flask-User/blob/master/flask_user/user_manager__utils.py; https://snyk.io/vuln/SNYK-PYTHON-FLASKUSER-1293188
CVE: CVE-2020-26763
Published: 2021-07-05
Description: The Rocket.Chat desktop application 2.17.11 opens external links without user interaction.
CVSS Score: 7.5 (HIGH)
References: https://github.com/RocketChat/Rocket.Chat.Electron/pull/1710; https://github.com/RocketChat/Rocket.Chat.Electron/pull/1710
CVE: CVE-2021-35331
Published: 2021-07-05
Description: In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: https://core.tcl-lang.org/tcl/info/28ef6c0c741408a2; https://core.tcl-lang.org/tcl/info/bad6cc213dfe8280; https://github.com/tcltk/tcl/commit/4705dbdde2f32ff90420765cd93e7ac71d81a222
CVE: CVE-2021-36158
Published: 2021-07-05
Description: In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-312
References: https://gitlab.alpinelinux.org/alpine/aports/-/issues/12811; https://gitlab.alpinelinux.org/alpine/aports/-/issues/12811
CVE: CVE-2021-32233
Published: 2021-07-06
Description: SmarterTools SmarterMail before Build 7776 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.smartertools.com/smartermail/release-notes/current; https://www.smartertools.com/smartermail/release-notes/current
CVE: CVE-2021-24005
Published: 2021-07-06
Description: Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-798
References: https://fortiguard.com/psirt/FG-IR-20-049; https://fortiguard.com/psirt/FG-IR-20-049
CVE: CVE-2021-24375
Published: 2021-07-06
Description: Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_quick_view AJAX handlers of the Motor WordPress theme before 3.1.0 allows an unauthenticated attacker access to arbitrary files in the server file system, and to execute arbitrary php scripts found on the server file system. We found no vulnerability for uploading files with this theme, so any scripts to be executed must already be on the server file system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://jetpack.com/2021/06/09/motor-wordpress-theme-vulnerabilities/; https://wpscan.com/vulnerability/d9518429-79d3-4b13-88ff-3722d05efa9f; https://jetpack.com/2021/06/09/motor-wordpress-theme-vulnerabilities/
CVE: CVE-2021-24384
Published: 2021-07-06
Description: The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised user input from the shattr POST parameter, leading to a PHP Object Injection issue. Even though the plugin does not have a suitable gadget chain to exploit this, other installed plugins could, which might lead to more severe issues such as RCE
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wpscan.com/vulnerability/fb6c407c-713c-4e83-92ce-4e5f791be696; https://wpscan.com/vulnerability/fb6c407c-713c-4e83-92ce-4e5f791be696
CVE: CVE-2021-24386
Published: 2021-07-06
Description: The WP SVG images WordPress plugin before 3.4 did not sanitise the SVG files uploaded, which could allow low privilege users such as author+ to upload a malicious SVG and then perform XSS attacks by inducing another user to access the file directly. In v3.4, the plugin restricted such upload to editors and admin, with an option to also allow author to do so. The description of the plugin has also been updated with a security warning as upload of such content is intended.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e9b48b19-14cc-41ad-a029-f7f9ae236e4e; https://wpscan.com/vulnerability/e9b48b19-14cc-41ad-a029-f7f9ae236e4e
CVE: CVE-2021-24387
Published: 2021-07-06
Description: The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://contempothemes.com/wp-real-estate-7/changelog/; https://wpscan.com/vulnerability/27264f30-71d5-4d2b-8f36-4009a2be6745; https://contempothemes.com/wp-real-estate-7/changelog/
CVE: CVE-2021-24388
Published: 2021-07-06
Description: In the VikRentCar Car Rental Management System WordPress plugin before 1.1.7, there is a custom filed option by which we can manage all the fields that the users will have to fill in before saving the order. However, the field name is not sanitised or escaped before being output back in the page, leading to a stored Cross-Site Scripting issue. There is also no CSRF check done before saving the setting, allowing attackers to make a logged in admin set arbitrary Custom Fields, including one with XSS payload in it.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/e3f6576f-08cb-4278-8c79-3ef4d0b85cd9; https://wpscan.com/vulnerability/e3f6576f-08cb-4278-8c79-3ef4d0b85cd9
CVE: CVE-2021-24389
Published: 2021-07-06
Description: The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/23b8b8c4-cded-4887-a021-5f3ea610213b; https://wpscan.com/vulnerability/23b8b8c4-cded-4887-a021-5f3ea610213b
CVE: CVE-2021-24405
Published: 2021-07-06
Description: The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users (such as subscriber) to change them. If users can't register, this can be done through CSRF. Furthermore, the cookie banner setting is not sanitised or validated before being output in all pages of the frontend and the backend settings one, leading to a Stored Cross-Site Scripting issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: http://packetstormsecurity.com/files/166543/WordPress-Easy-Cookie-Policy-1.6.2-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/9157d6d2-4bda-4fcd-8192-363a63a51ff5; http://packetstormsecurity.com/files/166543/WordPress-Easy-Cookie-Policy-1.6.2-Cross-Site-Scripting.html
CVE: CVE-2021-24406
Published: 2021-07-06
Description: The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login. Such issue could allow an attacker to induce a user to use a login URL redirecting to a website under their control and being a replica of the legitimate one, asking them to re-enter their credentials (which will then in the attacker hands)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/a9284931-555b-4c96-86a3-09e1040b0388; https://wpscan.com/vulnerability/a9284931-555b-4c96-86a3-09e1040b0388
CVE: CVE-2021-24407
Published: 2021-07-06
Description: The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fba9f010-1202-4eea-a6f5-78865c084153; https://wpscan.com/vulnerability/fba9f010-1202-4eea-a6f5-78865c084153
CVE: CVE-2021-24451
Published: 2021-07-06
Description: The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/40603382-404b-44a2-8212-f[PII_REDACTED]c; https://wpscan.com/vulnerability/40603382-404b-44a2-8212-f[PII_REDACTED]c
CVE: CVE-2021-24494
Published: 2021-07-06
Description: The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email's id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8f14733e-84c3-4f7c-93f8-e27c74519160; https://wpscan.com/vulnerability/8f14733e-84c3-4f7c-93f8-e27c74519160
CVE: CVE-2021-27930
Published: 2021-07-06
Description: Multiple stored XSS vulnerabilities in IrisNext Edition 9.5.16, which allows an authenticated (or compromised) user to inject malicious JavaScript in folder/file name within the application in order to grab other users’ sessions or execute malicious code in their browsers (1-click RCE).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2021-27930.pdf; https://varsnext.iriscorporate.com/history.html; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2021-27930.pdf
CVE: CVE-2021-32559
Published: 2021-07-06
Description: An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md; https://github.com/mhammond/pywin32/issues/1700; https://github.com/mhammond/pywin32/pull/1701
CVE: CVE-2021-31771
Published: 2021-07-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CWE: CWE-732
CVE: CVE-2021-32740
Published: 2021-07-06
Description: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2.8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/sporkmonger/addressable/commit/0d8a3127e35886ce9284810a7f2438bff6b43cbc; https://github.com/sporkmonger/addressable/security/advisories/GHSA-jxhc-q857-3j6g; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDFQM2NHNAZ3NNUQZEJTYECYZYXV4UDS/
CVE: CVE-2021-35440
Published: 2021-07-06
Description: Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment (e.g. if re-using internal URL's for deploying, or cookies that are very permissive) private information may be retrieved by the attacker.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Smashing/smashing/blob/ad7325f159f89854ca4e7d94e7be9bee507b6d46/CHANGELOG.md; https://github.com/Smashing/smashing/pull/186; https://github.com/Smashing/smashing/pull/186#issuecomment-871727614
CVE: CVE-2021-3598
Published: 2021-07-06
Description: There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1970987; https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html; https://security.gentoo.org/glsa/202210-31