CVE-2021-3520
CriticalAdvisory
Published 30 Apr 2021In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 753
- of 17,787 indexed, latest versions
- Container images
- 555
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: lz4 security update
Carried by container images the latest versions of 753 of 17,787 indexed charts deploy, on 555 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| lz4deb | 0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more | 0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more | 511 |
| lz4apk | 1.9.2-r0, 1.9.3-r0 | 1.9.2-r1, 1.9.3-r1 | 5 |
| lz4rpm | 1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el8 | 0:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.1 | 39 |
- OSV records
- ALPINE-CVE-2021-3520UBUNTU-CVE-2021-3520RHSA-2021:2575DLA-2657-1DSA-4919-1openSUSE-SU-2024:11562-1SUSE-SU-2021:1647-1
- Also known as
- USN-4968-1, USN-4968-2
Charts affected
753 by stars
Container images carrying it
555 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| yandex/ | ab1738a64b70 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| yandex/ | ccf9c2b5e3f2 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| yandex/ | d210dc69321e | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| zooz/ | f491d1f7a865 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| gcr.io/ | 809338a69bd5 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| gcr.io/ | cf3c3af0187e | lz4 | 1.8.3-1+deb10u1 | 1 |
| gcr.io/ | 10f4dbc8eeeb | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| gcr.io/ | cb5c1bddd1b5 | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| gcr.io/ | 9d0006c93668 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| gcr.io/ | 360130ab5850 | lz4 | 1.8.3-1+deb10u1 | 1 |
| gcr.io/ | 5f60c4988859 | lz4 | 1.8.3-1+deb10u1 | 1 |
| gcr.io/ | 5ea7b7f3632a | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| gcr.io/ | 8f9ff98fdbef | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| gcr.io/ | e8bc6cf08613 | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| ghcr.io/ | 61daa1bba5cb | lz4 | 1.8.0-3.8.1 | 1 |
| ghcr.io/ | 760eee87f839 | lz4 | 1.8.0-3.8.1 | 1 |
| ghcr.io/ | 6a1432b0d503 | lz4 | 1.8.0-3.8.1 | 1 |
| ghcr.io/ | f059af4de8ed | lz4 | 1.8.0-3.8.1 | 1 |
| ghcr.io/ | c7c70b527255 | lz4 | 1.8.0-3.8.1 | 1 |
| ghcr.io/ | e24a9e0a21b6 | lz4 | 1.8.0-3.8.1 | 1 |
| ghcr.io/ | d8a0334cddfc | lz4 | 1.8.3-1+deb10u1 | 1 |
| ghcr.io/ | d6e901ad0ebd | lz4 | 1.8.3-1+deb10u1 | 1 |
| ghcr.io/ | 8caf5289fe73 | lz4 | 0:1.8.3-3.el8_4 | 1 |
| ghcr.io/ | 5c6b8f91f1c4 | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| ghcr.io/ | fc9f5aca6cf4 | lz4 | 1.8.3-1+deb10u1 | 1 |
| ghcr.io/ | ef3670f7e0a8 | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| ghcr.io/ | ad943e9309e4 | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 448045c4270b | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 451706815103 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| ghcr.io/ | 763daf9caf8e | lz4 | 0.0~r131-2+deb9u1 | 1 |
| ghcr.io/ | 1c7a78c54f77 | lz4 | 1.8.3-1+deb10u1 | 1 |
| ghcr.io/ | ab8e2f583e56 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| ghcr.io/ | 88423e422ea8 | lz4 | 1.8.3-1+deb10u1 | 1 |
| ghcr.io/ | 1702fc9df79f | lz4 | 1.8.3-1+deb10u1 | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | lz4 | 1.8.3-1+deb10u1 | 1 |
| public.ecr.aws/ | 573779e57fae | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| quay.io/ | cdefc81c6b2e | lz4 | 0:1.8.3-3.el8_4 | 1 |
| quay.io/ | c2126f99e5c9 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| quay.io/ | ea7bb56278ab | lz4 | 0.0~r131-2+deb9u1 | 1 |
| quay.io/ | 5ac114e567ed | lz4 | 1.8.3-1+deb10u1 | 1 |
| quay.io/ | 7a4b9fedc724 | lz4 | 0:1.8.3-3.el8_4 | 1 |
| quay.io/ | 01c3b7acb301 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| quay.io/ | 041df93e2bac | lz4 | 0.0~r131-2+deb9u1 | 1 |
| quay.io/ | 34de6387233b | lz4 | 1.8.3-1+deb10u1 | 1 |
| quay.io/ | c2851757eca4 | lz4 | 0:1.8.3-3.el8_4 | 1 |
| quay.io/ | a1c3843b03bc | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| quay.io/ | 107a7c73af59 | lz4 | 0:1.8.3-3.el8_4 | 1 |
| quay.io/ | 6722d5041b47 | lz4 | 0:1.8.3-3.el8_4 | 1 |
| quay.io/ | 0bbe8b451fa3 | lz4 | 0:1.8.3-3.el8_4 | 1 |
| quay.io/ | a8b21cec412c | lz4 | 1.8.3-1+deb10u1 | 1 |