9.1

CVE-2021-4048

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lapack Project ≫ Lapack Version <= 3.10.0
Openblas Project ≫ Openblas Version < 0.3.18
Julialang ≫ Julia Version <= 1.6.3
Julialang ≫ Julia Version 1.7.0 Update beta1
Julialang ≫ Julia Version 1.7.0 Update beta2
Julialang ≫ Julia Version 1.7.0 Update beta3
Julialang ≫ Julia Version 1.7.0 Update beta4
Julialang ≫ Julia Version 1.7.0 Update rc1
Redhat ≫ Ceph Storage Version 2.0
Redhat ≫ Ceph Storage Version 3.0
Redhat ≫ Ceph Storage Version 4.0
Redhat ≫ Ceph Storage Version 5.0
Redhat ≫ Enterprise Linux Version 8.0
Fedoraproject ≫ Fedora Version 34
Fedoraproject ≫ Fedora Version 35
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.64% 0.843
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://github.com/JuliaLang/julia/issues/42415
Patch
Third Party Advisory
Issue Tracking
https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781
Patch
Third Party Advisory
https://github.com/Reference-LAPACK/lapack/pull/625
Patch
Third Party Advisory
Issue Tracking
https://github.com/xianyi/OpenBLAS/commit/2be5ee3cca97a597f2ee2118808a2d5eacea050c
Patch
Third Party Advisory
https://github.com/xianyi/OpenBLAS/commit/337b65133df174796794871b3988cd03426e6d41
Patch
Third Party Advisory
https://github.com/xianyi/OpenBLAS/commit/ddb0ff5353637bb5f5ad060c9620e334c143e3d7
Patch
Third Party Advisory
https://github.com/xianyi/OpenBLAS/commit/fe497efa0510466fd93578aaf9da1ad8ed4edbe7
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QFEVOCUG2UXMVMFMTU4ONJVDEHY2LW2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/