vulnerability

Amazon Linux 2023: CVE-2021-20304: Medium priority package update for openexr

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:N/AC:L/Au:N/C:N/I:N/A:C)	Feb 15, 2021	Feb 17, 2025	Jul 9, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Feb 15, 2021

Added

Feb 17, 2025

Modified

Jul 9, 2025

Description

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.

Solutions

amazon-linux-2023-upgrade-openexramazon-linux-2023-upgrade-openexr-debuginfoamazon-linux-2023-upgrade-openexr-debugsourceamazon-linux-2023-upgrade-openexr-develamazon-linux-2023-upgrade-openexr-libsamazon-linux-2023-upgrade-openexr-libs-debuginfo

References

CVE-2021-20304
https://attackerkb.com/topics/CVE-2021-20304
URL-https://alas.aws.amazon.com/AL2023/ALAS-2023-022.html
CWE-190

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today