An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An     attacker could use this flaw to crash an application compiled with OpenEXR. (CVE-2021-26945)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker
    who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds
    read. The greatest risk from this flaw is to application availability. (CVE-2021-3598)

  - A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1.
    An attacker could use this flaw to execute arbitrary code with the permissions of the user running the
    application compiled against OpenEXR. (CVE-2021-23169)

  - An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in
    versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.
    (CVE-2021-23215)

  - An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in
    versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This
    is a different flaw from CVE-2021-23215. (CVE-2021-26260)

  - An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An
    attacker could use this flaw to crash an application compiled with OpenEXR. (CVE-2021-26945)

ID	Name	Product	Family	Severity
223727	Linux Distros Unpatched Vulnerability : CVE-2021-26945	Nessus	Misc.	medium
405915	Alpine: multiple openexr packages: security update to 3.1.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405915	Alpine: multiple openexr packages: security update to 3.1.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400162	Alpine: multiple openexr packages: security update to 2.5.7-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400162	Alpine: multiple openexr packages: security update to 2.5.7-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2021-26945

medium

Tenable Plugins

medium

high

high

high

high