Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1825-1

Опубликовано: 10 июл. 2021
Источник: suse-cvrf

Описание

Security update for lz4

This update for lz4 fixes the following issues:

  • CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438).

Список пакетов

openSUSE Leap 15.3
liblz4-1-1.9.2-3.3.1
liblz4-1-32bit-1.9.2-3.3.1
liblz4-devel-1.9.2-3.3.1
lz4-1.9.2-3.3.1

Ссылки

Описание

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.

Затронутые продукты
openSUSE Leap 15.3:liblz4-1-1.9.2-3.3.1
openSUSE Leap 15.3:liblz4-1-32bit-1.9.2-3.3.1
openSUSE Leap 15.3:liblz4-devel-1.9.2-3.3.1
openSUSE Leap 15.3:lz4-1.9.2-3.3.1
Ссылки