CVE-2021-4048
At a glance Severity Not available EPSS EPSS 2.76 % · percentile 86 (2026-10-27) State PUBLISHED Published 2021-12-08 Updated 2024-08-03 Assigner redhat NVD status Modified Description An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
Scores Version Score Vector Scored by CVSS 3.1 CRITICAL 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:lapack_project:lapack:*:*:*:*:*:*:*:* ≤ 3.10.0cpe:2.3:a:openblas_project:openblas:*:*:*:*:*:*:*:* < 0.3.18cpe:2.3:a:julialang:julia:*:*:*:*:*:*:*:* ≤ 1.6.3cpe:2.3:a:julialang:julia:1.7.0:beta1:*:*:*:*:*:*cpe:2.3:a:julialang:julia:1.7.0:beta2:*:*:*:*:*:*cpe:2.3:a:julialang:julia:1.7.0:beta3:*:*:*:*:*:*cpe:2.3:a:julialang:julia:1.7.0:beta4:*:*:*:*:*:*cpe:2.3:a:julialang:julia:1.7.0:rc1:*:*:*:*:*:*cpe:2.3:a:redhat:ceph_storage:2.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:openshift_container_storage:4.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*Affected products Product Versions lapack affected lapack through version 3.10.0
References
Sources
