There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker
    who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds
    read. The greatest risk from this flaw is to application availability. (CVE-2021-3598)

  - A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1.
    An attacker could use this flaw to execute arbitrary code with the permissions of the user running the
    application compiled against OpenEXR. (CVE-2021-23169)

  - An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in
    versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.
    (CVE-2021-23215)

  - An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in
    versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This
    is a different flaw from CVE-2021-23215. (CVE-2021-26260)

  - An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An
    attacker could use this flaw to crash an application compiled with OpenEXR. (CVE-2021-26945)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 3.0.1之前版本的 OpenEXR 中发现整数溢出存在导致堆缓冲区溢出的缺陷。攻击者可利用此缺陷造成通过 OpenEXR 编译的应用程序崩溃。 (CVE-2021-26945)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 3.0.1之前版本的 OpenEXR 中，發現導致堆積緩衝區溢位的整數溢位。攻擊者可利用此瑕疵造成以 OpenEXR 編譯的應用程式損毀。 (CVE-2021-26945)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 3.0.1より前のバージョンの OpenEXR に、ヒープバッファオーバーフローにつながる整数オーバーフローが見つかりました。攻撃者がこの欠陥を利用して、OpenEXRでコンパイルされたアプリケーションをクラッシュさせる可能性があります。 （CVE-2021-26945）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An     attacker could use this flaw to crash an application compiled with OpenEXR. (CVE-2021-26945)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
400162	Alpine: multiple openexr packages: security update to 2.5.7-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
405915	Alpine: multiple openexr packages: security update to 3.1.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
405915	Alpine: multiple openexr packages: security update to 3.1.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
400162	Alpine: multiple openexr packages: security update to 2.5.7-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
223727	Linux Distros 未修补的漏洞: CVE-2021-26945	Nessus	Misc.	2025/3/4	2026/6/27	medium
223727	Linux Distros 未修補弱點：CVE-2021-26945	Nessus	Misc.	2025/3/4	2026/6/27	medium
223727	Linux Distros のパッチ未適用の脆弱性: CVE-2021-26945	Nessus	Misc.	2025/3/4	2026/6/27	medium
223727	Linux Distros Unpatched Vulnerability : CVE-2021-26945	Nessus	Misc.	2025/3/4	2026/6/27	medium

检测

插件搜索

high

high

high

high

medium

medium

medium

medium