CVE-2021-4048

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS be...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami openblas

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.18"}]}]

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2021-4048 lapack 修正版: 3.10.0-2

参照URL

advisory github.com
advisory github.com
advisory github.com
advisory github.com
advisory github.com
advisory github.com
advisory github.com
web lists.fedoraproject.org
web lists.fedoraproject.org
web nvd.nist.gov