Huawei EulerOS: Security Advisory for lz4 (EulerOS-SA-2021-2535)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for lz4 (EulerOS-SA-2021-2510)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : lz4 (EulerOS-SA-2021-2559)

According to the versions of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading ...

EulerOS 2.0 SP5 : lz4 (EulerOS-SA-2021-2510)

According to the versions of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading ...

EulerOS 2.0 SP9 : lz4 (EulerOS-SA-2021-2535)

According to the versions of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading ...

Huawei EulerOS: Security Advisory for lz4 (EulerOS-SA-2021-2474)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : lz4 (EulerOS-SA-2021-2474)

According to the versions of the lz4 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading...

Huawei EulerOS: Security Advisory for lz4 (EulerOS-SA-2021-2407)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : lz4 (EulerOS-SA-2021-2407)

According to the version of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to...

MySQL 8.0.x < 8.0.26 Multiple Vulnerabilities (July 2025 CPU)

The version of MySQL running on the remote host is 8.0.x prior to 8.0.26. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the July 2021 Critical Patch Update advisory: - curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting i...

openSUSE 15 Security Update : lz4 (openSUSE-SU-2021:1825-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1825-1 advisory. - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leadin...

openSUSE: Security Advisory for lz4 (openSUSE-SU-2021:1825-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for lz4 (important)

openSUSE Security Update: Security update for lz4 Announcement ID: openSUSE-SU-2021:1825-1 Rating: important References: 1185438 Cross-References: CVE-2021-3520 CVSS scores: CVE-2021-3520 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-3520 SUSE: 8.6...

OPENSUSE-SU-2021:1825-1 Security update for lz4

This update for lz4 fixes the following issues: - CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument bsc1185438...

CentOS 8 : lz4 (CESA-2021:2575)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2575 advisory. - lz4: memory corruption due to an integer overflow bug caused by memmove argument CVE-2021-3520 Note that Nessus has not tested for this issue but has instead...

Advisory ROSA-SA-2021-1912

Software: lz4 1.8.3 OS: Cobalt 7.9 CVE-ID: CVE-2019-17543 CVE-Crit: HIGH CVE-DESC: LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize affecting applications that call LZ4compressfast with large input. This issue can also cause data corruption. NOTE: the...

lz4 security update

1.8.3-3 - Fix memory corruption due to an integer overflow Resolves: CVE-2021-3520...

Oracle Linux 8 : lz4 (ELSA-2021-2575)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2575 advisory. 1.8.3-3 - Fix memory corruption due to an integer overflow Resolves: CVE-2021-3520 Tenable has extracted the preceding description block directly from the Oracl...

lz4: memory corruption due to an integer overflow bug caused by memmove argument

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability...

Moderate: Red Hat Security Advisory: lz4 security update

An update for lz4 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...