CVE-2021-3941
published 2022-03-25CVE-2021-3941: In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;`…
medium6.5CVSS 3.1
AVLACLPRLUINSCCNINAH
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | openexr | < openexr 3.1.5-2 (bookworm) | openexr 3.1.5-2 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| openexr | openexr | — | — |
| openexr | openexr | — | — |
| openexr | openexr | >= 0 < 2.5.4-2+deb11u1 | 2.5.4-2+deb11u1 |
| openexr | openexr | >= 0 < 3.1.5-2 | 3.1.5-2 |
| openexr | openexr | >= 0 < 3.1.5-2 | 3.1.5-2 |
| openexr | openexr | >= 0 < 3.1.5-2 | 3.1.5-2 |
| openexr | openexr | >= 0 < 2.3.0-6ubuntu0.5+esm1 | 2.3.0-6ubuntu0.5+esm1 |
| openexr | openexr | >= 0 < 2.5.7-1ubuntu0.1~esm1 | 2.5.7-1ubuntu0.1~esm1 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| typo3 | cms | >= 11.0.0 < 11.5.0 | 11.5.0 |
| typo3 | cms-core | >= 11.0.0 < 11.5.0 | 11.5.0 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
ghsa5.0MEDIUM
osv6.5MEDIUM
Ubuntu
OpenEXR vulnerabilities
vendor_ubuntu·2022-09-20·CVSS 5.3
CVE-2021-23215 [MEDIUM] OpenEXR vulnerabilities
Title: OpenEXR vulnerabilities
Summary: Several security issues were fixed in OpenEXR.
It was discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code. These issues only affected Ubuntu 20.04 ESM. (CVE-2021-3598,
CVE-2021-3605, CVE-2021-20296, CVE-2021-23215, CVE-2021-26260)
It was discovered that OpenEXR incorrectly handled certain EXR
image files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code. (CVE-2021-3933)
It was discovered that OpenEXR incorrectly handled certain EXR image files.
An attacker could possibly use this issue to cause a crash. (CVE-2021-3941)
Instructions: In ge
Ubuntu
OpenEXR vulnerability
vendor_ubuntu·2021-11-17
CVE-2021-3941 OpenEXR vulnerability
Title: OpenEXR vulnerability
Summary: OpenEXR could be made to crash if it opened a specially crafted file.
It was discovered that OpenEXR incorrectly handled certain EXR image files.
An attacker could possibly use this issue to cause a crash.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
openexr: Divide-by-zero in Imf_3_1::RGBtoXYZ
vendor_redhat·2021-09-21·CVSS 6.5
CVE-2021-3941 [MEDIUM] CWE-369 openexr: Divide-by-zero in Imf_3_1::RGBtoXYZ
openexr: Divide-by-zero in Imf_3_1::RGBtoXYZ
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
Statement: This flaw is out of support scope for OpenEXR as shipped in Red Hat Enterprise Linux 6 and 7. Please see https://access.redhat.com/support/policy/updates/errata/ for more information on support scopes.
Package: OpenEXR (Red Hat Enterprise Linux 6) - Out of support scope
Package: OpenEXR (Red Hat Enterprise Linux 7) - Out of support scope
Package: mingw-OpenE
Debian
CVE-2021-3941: openexr - In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations ...
vendor_debian·2021·CVSS 6.5
CVE-2021-3941 [MEDIUM] CVE-2021-3941: openexr - In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations ...
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
Scope: local
bookworm: resolved (fixed in 3.1.5-2)
bullseye: resolved (fixed in 2.5.4-2+deb11u1)
forky: resolved (fixed in 3.1.5-2)
sid: resolved (fixed in 3.1.5-2)
trixie: resolved (fixed in 3.1.5-2)
OSV
openexr vulnerabilities
osv·2022-09-20·CVSS 5.3
CVE-2021-3598 [MEDIUM] openexr vulnerabilities
openexr vulnerabilities
It was discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code. These issues only affected Ubuntu 20.04 ESM. (CVE-2021-3598,
CVE-2021-3605, CVE-2021-20296, CVE-2021-23215, CVE-2021-26260)
It was discovered that OpenEXR incorrectly handled certain EXR
image files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code. (CVE-2021-3933)
It was discovered that OpenEXR incorrectly handled certain EXR image files.
An attacker could possibly use this issue to cause a crash. (CVE-2021-3941)
GHSA
GHSA-rpq9-h75r-mccg: In ImfChromaticities
ghsa_unreviewed·2022-03-26
CVE-2021-3941 [MEDIUM] CWE-369 GHSA-rpq9-h75r-mccg: In ImfChromaticities
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
OSV
CVE-2021-3941: In ImfChromaticities
osv·2022-03-25·CVSS 6.5
CVE-2021-3941 [MEDIUM] CVE-2021-3941: In ImfChromaticities
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
GHSA
HTTP Host Header Injection
ghsa·2021-10-05·CVSS 5.0
CVE-2021-41114 [MEDIUM] CWE-20 HTTP Host Header Injection
HTTP Host Header Injection
### Meta
* CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:O/RC:C` (3.5)
### Problem
It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP _Host_ header. TYPO3 uses the HTTP _Host_ header, for example, to generate absolute URLs during the frontend rendering process. Since the host header itself is provided by the client, it can be forged to any value, even in a name-based virtual hosts environment.
This vulnerability is the same as described in [TYPO3-CORE-SA-2014-001 (CVE-2014-3941)](https://typo3.org/security/advisory/typo3-core-sa-2014-001/). A regression, introduced during TYPO3 v11 development, led to this situation. The already existing setting _$GLOBALS['TYPO3_CONF_VARS']['SYS']['trustedH
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://bugzilla.redhat.com/show_bug.cgi?id=2019789https://lists.debian.org/debian-lts-announce/2022/12/msg00022.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I2JSMJ7HLWFPYYV7IAQZD5ZUUUN7RWBN/https://security.gentoo.org/glsa/202210-31https://www.debian.org/security/2022/dsa-5299https://bugzilla.redhat.com/show_bug.cgi?id=2019789https://lists.debian.org/debian-lts-announce/2022/12/msg00022.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I2JSMJ7HLWFPYYV7IAQZD5ZUUUN7RWBN/https://security.gentoo.org/glsa/202210-31https://www.debian.org/security/2022/dsa-5299
2022-03-25
Published