CVE-2021-20300 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-20300 PUBLISHED

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.

EPSS 0.39% · 60.1th percentile

Risk Scores

EPSS Score

0.39%

60.1th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:Pro:20.04:LTS	openexr	2.2.1-4.1ubuntu1, 0, 2.3.0-6ubuntu0.1
Ubuntu:18.04:LTS	openexr	2.2.0-11.1ubuntu1.4, 2.2.0-11.1ubuntu1.1, 2.2.0-11ubuntu1
Ubuntu:Pro:16.04:LTS	openexr	2.2.0-10ubuntu2.1, 2.2.0-10ubuntu2, 2.2.0-9ubuntu1

Timeline

Aug 20, 2021 CVE Published
Mar 4, 2022 PoC Published
Mar 5, 2022 EPSS Score
Apr 25, 2022 EPSS Score
Jun 15, 2022 EPSS Score
Aug 6, 2022 EPSS Score
Sep 26, 2022 EPSS Score
Nov 16, 2022 EPSS Score
Jan 6, 2023 EPSS Score
Feb 26, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 18, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2021-20300 third-party-advisory
https://access.redhat.com/security/cve/CVE-2021-20300 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2021-20300 third-party-advisory

Open in Interactive Console →