Поиск уязвимостей
Количество 16
Количество 16
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (rela ...
openSUSE-SU-2019:2399-1
Security update for lz4
openSUSE-SU-2019:2398-1
Security update for lz4
SUSE-SU-2019:2757-1
Security update for lz4
RLSA-2025:11035
Moderate: lz4 security update
GHSA-fxrv-74g3-w7qr
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.)
ELSA-2025-11035
ELSA-2025-11035: lz4 security update (MODERATE)
BDU:2023-07612
Уязвимость алгоритма сжатия данных без потерь LZ4, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
SUSE-SU-2021:1613-1
Security update for lz4
BDU:2020-01532
Уязвимость программного средства MiniMagick, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнить произвольный код
ALT-PU-2019-2817
ALT-PU-2019-2817: package `lz4` update to version 1.9.2-alt1
ALT-PU-2021-2477
ALT-PU-2021-2477: package `MySQL` update to version 8.0.26-alt1
ALT-PU-2021-2461
ALT-PU-2021-2461: package `MySQL` update to version 8.0.26-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-17543 LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk." | CVSS3: 8.1 | 10% Средний | около 7 лет назад |
 | CVE-2019-17543 LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk." | CVSS3: 8.1 | 10% Средний | больше 7 лет назад |
 | CVE-2019-17543 LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk." | CVSS3: 8.1 | 10% Средний | около 7 лет назад |
| CVE-2019-17543 LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (rela ... | CVSS3: 8.1 | 10% Средний | около 7 лет назад |
 | openSUSE-SU-2019:2399-1 Security update for lz4 | 10% Средний | около 7 лет назад | |
| openSUSE-SU-2019:2398-1 Security update for lz4 | 10% Средний | около 7 лет назад | |
| SUSE-SU-2019:2757-1 Security update for lz4 | 10% Средний | около 7 лет назад | |
 | RLSA-2025:11035 Moderate: lz4 security update | 10% Средний | больше 1 года назад | |
| GHSA-fxrv-74g3-w7qr LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) | CVSS3: 8.1 | 10% Средний | больше 4 лет назад |
| ELSA-2025-11035 ELSA-2025-11035: lz4 security update (MODERATE) | 10% Средний | больше 1 года назад | |
 | BDU:2023-07612 Уязвимость алгоритма сжатия данных без потерь LZ4, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 8.1 | 10% Средний | больше 7 лет назад |
| SUSE-SU-2021:1613-1 Security update for lz4 | больше 5 лет назад | ||
| BDU:2020-01532 Уязвимость программного средства MiniMagick, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 8% Низкий | больше 7 лет назад |
| ALT-PU-2019-2817 ALT-PU-2019-2817: package `lz4` update to version 1.9.2-alt1 | CVSS3: 8.1 | 10% Средний | около 7 лет назад |
| ALT-PU-2021-2477 ALT-PU-2021-2477: package `MySQL` update to version 8.0.26-alt1 | CVSS3: 8.1 | около 5 лет назад | |
| ALT-PU-2021-2461 ALT-PU-2021-2461: package `MySQL` update to version 8.0.26-alt1 | CVSS3: 8.1 | больше 5 лет назад |
Уязвимостей на страницу