Количество 16
Количество 16
CVE-2021-3520
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.
CVE-2021-3520
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.
CVE-2021-3520
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.
CVE-2021-3520
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.
CVE-2021-3520
There's a flaw in lz4. An attacker who submits a crafted file to an ap ...
openSUSE-SU-2021:1825-1
Security update for lz4
openSUSE-SU-2021:0760-1
Security update for lz4
SUSE-SU-2021:1825-1
Security update for lz4
SUSE-SU-2021:1647-1
Security update for lz4
RLSA-2021:2575
Moderate: lz4 security update
GHSA-gmc7-pqv9-966m
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.
ELSA-2021-2575
ELSA-2021-2575: lz4 security update (MODERATE)
BDU:2021-05259
Уязвимость функции memmove() алгоритма сжатия данных без потерь LZ4, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
SUSE-SU-2021:1613-1
Security update for lz4
ALT-PU-2024-8898
ALT-PU-2024-8898: package `lz4` update to version 1.9.4-alt1
ALT-PU-2022-7828
ALT-PU-2022-7828: package `lz4` update to version 1.9.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-3520 There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. | CVSS3: 9.8 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-3520 There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. | CVSS3: 8.6 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-3520 There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. | CVSS3: 9.8 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-3520 There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. | 3% Низкий | около 1 года назад | |
| CVE-2021-3520 There's a flaw in lz4. An attacker who submits a crafted file to an ap ... | CVSS3: 9.8 | 3% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:1825-1 Security update for lz4 | 3% Низкий | больше 5 лет назад | |
| openSUSE-SU-2021:0760-1 Security update for lz4 | 3% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:1825-1 Security update for lz4 | 3% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:1647-1 Security update for lz4 | 3% Низкий | больше 5 лет назад | |
 | RLSA-2021:2575 Moderate: lz4 security update | 3% Низкий | больше 5 лет назад | |
| GHSA-gmc7-pqv9-966m There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| ELSA-2021-2575 ELSA-2021-2575: lz4 security update (MODERATE) | 3% Низкий | больше 5 лет назад | |
 | BDU:2021-05259 Уязвимость функции memmove() алгоритма сжатия данных без потерь LZ4, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.8 | 3% Низкий | больше 5 лет назад |
| SUSE-SU-2021:1613-1 Security update for lz4 | больше 5 лет назад | ||
| ALT-PU-2024-8898 ALT-PU-2024-8898: package `lz4` update to version 1.9.4-alt1 | CVSS3: 9.8 | 3% Низкий | больше 2 лет назад |
| ALT-PU-2022-7828 ALT-PU-2022-7828: package `lz4` update to version 1.9.4-alt1 | CVSS3: 9.8 | 3% Низкий | почти 4 года назад |
Уязвимостей на страницу