CVE:CVE-2021-20304
CNNVD:CNNVD-202108-1842
Industrial Light and Magic OpenEXR是美国工业光魔（Industrial Light and Magic）公司的一种图像文件格式，适用于高动态范围（HDR）图像。
Industrial Light and Magic OpenEXR 存在安全漏洞，攻击者可以通过该漏洞导致拒绝服务。以下产品及版本受到影响：SUSE Manager Server 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Proxy 4.0, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server 15-SP1-LTSS, SUSE Linux Enterprise Server 15-SP1-BCL, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Module for Desktop Applications 15-SP3, SUSE Linux Enterprise Module for Desktop Applications 15-SP2, SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS, SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Enterprise Storage 6, SUSE CaaS Platform 4.0。
solution:Upgrade openexr openexr to a higher version than 2.5.7,and avoid the version (,2.5.7]