ALSA-2021:2575 Moderate: lz4 security update

🗓️ 29 Jun 2021 13:43:40Reported by GoogleType

osv🔗 osv.dev👁 27 Views

Moderate lz4 security update. LZ4 is a very fast, lossless compression algorithm. Security fix for memory corruption due to an integer overflow bug

Reporter	Title	Published	Views	Family All 159
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: High severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:57	–	ibm
Tenable Nessus	Amazon Linux 2022 : lz4, lz4-devel, lz4-libs (ALAS2022-2022-169)	4 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : lz4, lz4-devel, lz4-libs (ALAS2023-2023-015)	21 Mar 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0049: lz4 (ALINUX3-SA-2021:0049)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : lz4 (ALSA-2021:2575)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : lz4 (CESA-2021:2575)	3 Jul 202100:00	–	nessus
Tenable Nessus	Debian DLA-2657-1 : lz4 security update	13 May 202100:00	–	nessus

Source	Link
errata	www.errata.almalinux.org/8/ALSA-2021-2575.html
vulners	www.vulners.com/cve/CVE-2021-3520

04 Feb 2026 04:26Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.00138