CVE-2021-3479 log
| Source |
|
| Severity | Low |
| Remote | No |
| Type | Denial of service |
| Description | There's a flaw in OpenEXR's Scanline API functionality in versions before 2.5.4. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1746 | openexr | 2.5.3-6 | 2.5.4-1 | Low | Fixed |