SUSE CVE-2021-3479

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability...

The vulnerability of the Scanline API interface in the OpenEXR library allows a hacker to trigger a service failure.

The vulnerability of the Scanline API interface of the OpenEXR library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure by creating specially crafted EXR files...

AZL-44244 CVE-2021-3479 affecting package OpenEXR 2.3.0-6

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability...