Memory corruption in liblz4

🗓️ 25 Aug 2022 12:00:00Reported by rustsecType

rustsec

rustsec🔗 rustsec.org👁 32 Views

Memory corruption in liblz

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: High severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:57	–	ibm
Tenable Nessus	Amazon Linux 2022 : lz4, lz4-devel, lz4-libs (ALAS2022-2022-169)	4 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : lz4, lz4-devel, lz4-libs (ALAS2023-2023-015)	21 Mar 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0049: lz4 (ALINUX3-SA-2021:0049)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : lz4 (ALSA-2021:2575)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : lz4 (CESA-2021:2575)	3 Jul 202100:00	–	nessus
Tenable Nessus	Debian DLA-2657-1 : lz4 security update	13 May 202100:00	–	nessus

Vulners

Node

10xgenomics lz4-sysRange0.0.0–1.9.4rust

13 Jun 2023 13:10Current

5.9Medium risk

Vulners AI Score5.9

CVSS 27.5

CVSS 3.19.8

EPSS0.00138

memory corruption liblz4 vulnerability cve-2021-3520 integer overflow out-of-bounds write lz4-sys 1.9.4 software