Test Kennung:	1.3.6.1.4.1.25623.1.0.892701
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for openexr (DLA-2701-1)
Zusammenfassung:	The remote host is missing an update for the 'openexr'; package(s) announced via the DLA-2701-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openexr' package(s) announced via the DLA-2701-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in OpenEXR, a library and tools for the OpenEXR high dynamic-range (HDR) image format. An attacker could cause a denial of service (DoS) through application crash and excessive memory consumption. Affected Software/OS: 'openexr' package(s) on Debian Linux. Solution: For Debian 9 stretch, these problems have been fixed in version 2.2.0-11+deb9u3. We recommend that you upgrade your openexr packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3474 https://security.gentoo.org/glsa/202107-27 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24831 https://bugzilla.redhat.com/show_bug.cgi?id=1939142 https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2021-3475 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25297 https://bugzilla.redhat.com/show_bug.cgi?id=1939144 Common Vulnerability Exposure (CVE) ID: CVE-2021-3476 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24787 https://bugzilla.redhat.com/show_bug.cgi?id=1939145 Common Vulnerability Exposure (CVE) ID: CVE-2021-3477 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956 https://bugzilla.redhat.com/show_bug.cgi?id=1939159 Common Vulnerability Exposure (CVE) ID: CVE-2021-3478 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409 https://bugzilla.redhat.com/show_bug.cgi?id=1939160 Common Vulnerability Exposure (CVE) ID: CVE-2021-3479 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25370 https://bugzilla.redhat.com/show_bug.cgi?id=1939149 Common Vulnerability Exposure (CVE) ID: CVE-2021-3598 https://bugzilla.redhat.com/show_bug.cgi?id=1970987
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.