CVE Vulnerabilities

CVE-2021-30046

Improper Handling of Exceptional Conditions

Published: Apr 06, 2021 | Modified: Apr 19, 2021

CVSS 3.x

6.5

MEDIUM

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS 2.x

4.3 MEDIUM

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-30046
CWE	https://cwe.mitre.org/data/definitions/755.html

VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_band() function, in which a crafted file can cause a denial of service.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

Name	Vendor	Start Version	End Version
Vigra_computer_vision_library	Vigra_computer_vision_library_project	1.11.1 (including)	1.11.1 (including)

References

https://github.com/ukoethe/vigra/issues/494

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.