CVE-2021-4048
- Source
- https://cve.org/CVERecord?id=CVE-2021-4048
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4048.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-4048
- Aliases
- Downstream
DEBIAN (1)
JLSEC (1)
MGASA (1)
openSUSE (2)
RHSA (1)
RLSA (1)
UBUNTU (1)
- Related
- Published
- 2021-12-08T22:15:10Z
- Modified
- 2026-10-20T10:55:29Z
- Severity
-
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "34" }, { "last_affected": "34" }, { "introduced": "35" }, { "last_affected": "35" } ], "source": "CPE_STRING" } ], "vendor_product": "fedoraproject:fedora" }, { "cpes": [ "cpe:2.3:a:redhat:ceph_storage:2.0:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "2.0" }, { "last_affected": "2.0" }, { "introduced": "3.0" }, { "last_affected": "3.0" }, { "introduced": "4.0" }, { "last_affected": "4.0" }, { "introduced": "5.0" }, { "last_affected": "5.0" } ], "source": "CPE_STRING" } ], "vendor_product": "redhat:ceph_storage" }, { "cpes": [ "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "source": "CPE_STRING" } ], "vendor_product": "redhat:enterprise_linux" }, { "cpes": [ "cpe:2.3:a:redhat:openshift_container_storage:4.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "4.0" }, { "last_affected": "4.0" } ], "source": "CPE_STRING" } ], "vendor_product": "redhat:openshift_container_storage" }, { "cpes": [ "cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "4.0" }, { "last_affected": "4.0" } ], "source": "CPE_STRING" } ], "vendor_product": "redhat:openshift_data_foundation" } ] }- References
-
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QFEVOCUG2UXMVMFMTU4ONJVDEHY2LW2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/
- https://github.com/JuliaLang/julia/issues/42415
- https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781
- https://github.com/Reference-LAPACK/lapack/pull/625
- https://github.com/xianyi/OpenBLAS/commit/2be5ee3cca97a597f2ee2118808a2d5eacea050c
- https://github.com/xianyi/OpenBLAS/commit/337b65133df174796794871b3988cd03426e6d41
- https://github.com/xianyi/OpenBLAS/commit/ddb0ff5353637bb5f5ad060c9620e334c143e3d7
- https://github.com/xianyi/OpenBLAS/commit/fe497efa0510466fd93578aaf9da1ad8ed4edbe7
Affected packages
Git
github.com/OpenMathLib/OpenBLAS
Affected ranges
- Type
- GIT
- Repo
- https://github.com/OpenMathLib/OpenBLAS
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:openblas_project:openblas:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "fixed": "0.3.18" } ], "source": "CPE_RANGE" } ] }
Affected versions
v0.*
v0.1.0
v0.1.1
v0.1alpha1
v0.1alpha2
v0.1alpha2.1
v0.1alpha2.2
v0.1alpha2.3
v0.1alpha2.4
v0.1alpha2.5
v0.2.0
v0.2.1
v0.2.10
v0.2.10.rc1
v0.2.10.rc2
v0.2.11
v0.2.12
v0.2.13
v0.2.14
v0.2.15
v0.2.16
v0.2.17
v0.2.18
v0.2.19
v0.2.2
v0.2.20
v0.2.3
v0.2.4
v0.2.5
v0.2.6
v0.2.7
v0.2.8
v0.2.9
v0.2.9.rc2
v0.3.0
v0.3.1
v0.3.10
v0.3.11
v0.3.12
v0.3.13
v0.3.14
v0.3.15
v0.3.16
v0.3.17
v0.3.2
v0.3.3
v0.3.4
v0.3.5
v0.3.6
v0.3.7
v0.3.8
v0.3.9
github.com/julialang/julia
Affected ranges
- Type
- GIT
- Repo
- https://github.com/julialang/julia
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:julialang:julia:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "1.6.3" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:julialang:julia:1.7.0:beta1:*:*:*:*:*:*", "range": [ { "introduced": "1.7.0-beta1" }, { "last_affected": "1.7.0-beta1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:julialang:julia:1.7.0:beta2:*:*:*:*:*:*", "range": [ { "introduced": "1.7.0-beta2" }, { "last_affected": "1.7.0-beta2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:julialang:julia:1.7.0:beta3:*:*:*:*:*:*", "range": [ { "introduced": "1.7.0-beta3" }, { "last_affected": "1.7.0-beta3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:julialang:julia:1.7.0:beta4:*:*:*:*:*:*", "range": [ { "introduced": "1.7.0-beta4" }, { "last_affected": "1.7.0-beta4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:julialang:julia:1.7.0:rc1:*:*:*:*:*:*", "range": [ { "introduced": "1.7.0-rc1" }, { "last_affected": "1.7.0-rc1" } ], "source": "CPE_STRING" } ] }
Affected versions
1.*
1.7.0-beta1
1.7.0-beta2
1.7.0-beta3
1.7.0-beta4
1.7.0-rc1
v0.*
v0.2.0-rc1
v0.2.0-rc2
v0.2.0-rc3
v0.2.0-rc4
v0.3.0-rc1
v0.3.0-rc2
v0.3.0-rc3
v0.4.0-rc1
v0.5.0-rc0
v0.6.0-pre.alpha
v0.6.0-pre.beta
v0.7.0-alpha
v0.7.0-beta
v0.7.0-beta2
v0.7.0-rc1
v0.7.0-rc2
v1.*
v1.0.0
v1.0.0-rc1
v1.3.0-alpha
v1.6.0
v1.6.0-beta1
v1.6.0-rc1
v1.6.0-rc2
v1.6.0-rc3
v1.6.1
v1.6.2
v1.6.3
v1.7.0-beta1
v1.7.0-beta2
v1.7.0-beta3
v1.7.0-beta4
v1.7.0-rc1
github.com/openmathlib/openblas
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openmathlib/openblas
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "fixed": "2be5ee3cca97a597f2ee2118808a2d5eacea050c" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "337b65133df174796794871b3988cd03426e6d41" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "ddb0ff5353637bb5f5ad060c9620e334c143e3d7" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "fe497efa0510466fd93578aaf9da1ad8ed4edbe7" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
v0.*
v0.1.0
v0.1.1
v0.1alpha1
v0.1alpha2
v0.1alpha2.1
v0.1alpha2.2
v0.1alpha2.3
v0.1alpha2.4
v0.1alpha2.5
v0.2.0
v0.2.1
v0.2.10
v0.2.10.rc1
v0.2.10.rc2
v0.2.11
v0.2.12
v0.2.13
v0.2.14
v0.2.15
v0.2.16
v0.2.17
v0.2.18
v0.2.19
v0.2.2
v0.2.20
v0.2.3
v0.2.4
v0.2.5
v0.2.6
v0.2.7
v0.2.8
v0.2.9
v0.2.9.rc2
github.com/reference-lapack/lapack
Affected ranges
- Type
- GIT
- Repo
- https://github.com/reference-lapack/lapack
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:lapack_project:lapack:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "3.10.0" } ], "source": "CPE_RANGE" }, { "range": [ { "fixed": "38f3eeee3108b18158409ca2a100e6fe03754781" } ], "source": "REFERENCES_COMMIT" } ] }