UBUNTU-CVE-2021-4048

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-4048

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-4048.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2021-4048

Related

CVE-2021-4048

Published

2021-12-08T22:15:00Z

Modified

2025-01-13T10:22:27Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator

Summary

[none]

Details

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

References

Affected packages

Ubuntu:Pro:14.04:LTS / openblas

Package

Name: openblas
Purl: pkg:deb/ubuntu/openblas@0.2.8-6ubuntu1?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.2.8-2

0.2.8-3

0.2.8-4

0.2.8-6

0.2.8-6ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / openblas

Package

Name: openblas
Purl: pkg:deb/ubuntu/openblas@0.2.18-1ubuntu1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.2.14-1ubuntu1

0.2.15-1

0.2.15-1build1

0.2.18-1ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / lapack

Package

Name: lapack
Purl: pkg:deb/ubuntu/lapack@3.7.1-4ubuntu1?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.7.1-3ubuntu2

3.7.1-4ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / openblas

Package

Name: openblas
Purl: pkg:deb/ubuntu/openblas@0.2.20+ds-4?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.2.20+ds-4

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / lapack

Package

Name: lapack
Purl: pkg:deb/ubuntu/lapack@3.9.0-1build1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.8.0-2

3.8.0-8ubuntu1

3.9.0-1

3.9.0-1build1

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / openblas

Package

Name: openblas
Purl: pkg:deb/ubuntu/openblas@0.3.8+ds-1ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.3.7+ds-1

0.3.7+ds-7

0.3.8+ds-1

0.3.8+ds-1ubuntu0.20.04.1

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:22.04:LTS / lapack

Package

Name: lapack
Purl: pkg:deb/ubuntu/lapack@3.10.0-2ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.10.0-2ubuntu1

Affected versions

3.*

3.9.0-3ubuntu2

3.9.0-3ubuntu3

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas-dev"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas-test"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas-test-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas3"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas3-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas64-3"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas64-3-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas64-dev"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas64-test"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libblas64-test-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack-dev"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack-doc"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack-pic"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack-test"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack-test-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack3"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack3-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack64-3"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack64-3-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack64-dev"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack64-test"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapack64-test-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapacke"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapacke-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapacke-dev"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapacke64"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapacke64-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "liblapacke64-dev"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libtmglib-dev"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libtmglib3"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libtmglib3-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libtmglib64-3"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libtmglib64-3-dbgsym"
        },
        {
            "binary_version": "3.10.0-2ubuntu1",
            "binary_name": "libtmglib64-dev"
        }
    ]
}

Ubuntu:22.04:LTS / openblas

Package

Name: openblas
Purl: pkg:deb/ubuntu/openblas@0.3.18+ds-2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.3.18+ds-2

Affected versions

0.*

0.3.13+ds-3

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libjulia-openblas64"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libjulia-openblas64-dbgsym"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas-base"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas-dev"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas-openmp-dev"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas-pthread-dev"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas-serial-dev"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas0"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas0-openmp"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas0-openmp-dbgsym"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas0-pthread"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas0-pthread-dbgsym"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas0-serial"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas0-serial-dbgsym"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-0"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-0-openmp"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-0-openmp-dbgsym"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-0-pthread"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-0-pthread-dbgsym"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-0-serial"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-0-serial-dbgsym"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-dev"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-openmp-dev"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-pthread-dev"
        },
        {
            "binary_version": "0.3.18+ds-2",
            "binary_name": "libopenblas64-serial-dev"
        }
    ]
}