CVE-2021-4048

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS be...

Original description

The description as published by the source.

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami openblas

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.18"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-4048 lapack Fixed in: 3.10.0-2

References

patch github.com
patch github.com
patch github.com
patch github.com
patch github.com
patch github.com
patch github.com
web lists.fedoraproject.org
web lists.fedoraproject.org
web nvd.nist.gov