Lucene search
Veracode Vulnerability DatabaseVERACODE:29903HistoryApr 05, 2021 - 7:36 a.m.
Denial Of Service (DoS)
2021-04-0507:36:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
openexr vulnerability integer overflow out-of-bounds read
EPSS
0.001
Percentile
31.9%
openexr is vulnerable to denial of service (DoS). The vulnerability exists through a flaw in OpenEXR’s deep tile sample size calculations in versions before 3.0.0-beta, that could trigger an integer overflow, subsequently leading to an out-of-bounds read.
Related
nvd
nvd
CVE-2021-3477
2021-03-31 14:15:21
cve
cve
CVE-2021-3477
2021-03-31 14:15:21
debiancve
debiancve
CVE-2021-3477
2021-03-31 14:15:21
redhatcve
redhatcve
CVE-2021-3477
2021-03-30 18:57:04
prion
prion
Integer overflow
2021-03-31 14:15:00
ubuntucve
ubuntucve
CVE-2021-3477
2021-03-31 00:00:00
osv
osv
CVE-2021-3477
2021-03-31 14:15:21
openexr vulnerabilities
2021-04-01 17:33:50
openexr - security update
2021-07-03 00:00:00
cvelist
cvelist
CVE-2021-3477
2021-03-31 00:00:00
alpinelinux
alpinelinux
CVE-2021-3477
2021-03-31 14:15:21
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3843-1)
2021-12-02 00:00:00
openSUSE: Security Advisory for openexr (openSUSE-SU-2021:0670-1)
2021-05-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1489-1)
2021-06-09 00:00:00
nessus
nessus
SUSE SLED12 / SLES12 Security Update : openexr (SUSE-SU-2021:3843-1)
2021-12-02 00:00:00
openSUSE Security Update : openexr (openSUSE-2021-670)
2021-05-18 00:00:00
SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:1489-1)
2021-05-05 00:00:00
suse
suse
Security update for openexr (important)
2021-05-05 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2248
2023-10-17 12:58:34
ubuntu
ubuntu
OpenEXR vulnerabilities
2021-04-01 00:00:00
cloudfoundry
cloudfoundry
USN-4900-1: OpenEXR vulnerabilities | Cloud Foundry
2021-04-29 00:00:00
freebsd
freebsd
openexr, ilmbase -- security fixes related to reading corrupted input files
2021-02-12 00:00:00
debian
debian
[SECURITY] [DLA 2701-1] openexr security update
2021-07-03 18:16:01
[SECURITY] [DLA 3236-1] openexr security update
2022-12-11 23:52:53
mageia
mageia
Updated openexr packages fix security vulnerabilities
2021-07-10 15:56:54
gentoo
gentoo
OpenEXR: Multiple vulnerabilities
2021-07-11 00:00:00