CVE-2021-3520
CriticalAdvisory
Published 30 Apr 2021In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 751
- of 17,781 indexed, latest versions
- Container images
- 553
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: lz4 security update
Carried by container images the latest versions of 751 of 17,781 indexed charts deploy, on 553 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| lz4deb | 0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more | 0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more | 509 |
| lz4apk | 1.9.2-r0, 1.9.3-r0 | 1.9.2-r1, 1.9.3-r1 | 5 |
| lz4rpm | 1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el8 | 0:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.1 | 39 |
- OSV records
- ALPINE-CVE-2021-3520UBUNTU-CVE-2021-3520RHSA-2021:2575DLA-2657-1DSA-4919-1openSUSE-SU-2024:11562-1SUSE-SU-2021:1647-1
- Also known as
- USN-4968-1, USN-4968-2
Charts affected
751 by stars
Container images carrying it
553 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| amancevice/ | c8c04bfe3d66 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| amartinm82/ | 1184353ff57b | lz4 | 1.8.3-1+deb10u1 | 1 |
| amundsendev/ | 69e7915e61c1 | lz4 | 1.8.3-1+deb10u1 | 1 |
| amundsendev/ | 4d98eb21f5f9 | lz4 | 1.8.3-1+deb10u1 | 1 |
| amundsendev/ | 99dda9502c3e | lz4 | 1.8.3-1+deb10u1 | 1 |
| anchore/ | bde9eedf639d | lz4 | 0:1.8.3-3.el8_4 | 1 |
| anchore/ | ed9b3badd17c | lz4 | 0:1.8.3-3.el8_4 | 1 |
| aolde/ | dc61ee713720 | lz4 | 1.8.3-1+deb10u1 | 1 |
| apache/ | 9f895c8ae371 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| apache/ | 8647309f95d1 | lz4 | 1.8.3-1+deb10u1 | 1 |
| apache/ | 090b7f87ec7f | lz4 | 1.8.3-1+deb10u1 | 1 |
| apache/ | 974efa2f21da | lz4 | 1.8.3-1+deb10u1 | 1 |
| apachepulsar/ | 4db6ff0b4045 | lz4 | 1.8.3-1+deb10u1 | 1 |
| apsl/ | 51e2de5c2c70 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| aquasec/ | 0bf607ce9308 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| argoproj/ | b0230853357d | lz4 | 0.0~r131-2+deb9u1 | 1 |
| arilot/ | 27a4f7e0f9f1 | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| asdkant/ | a23d8bf7c885 | lz4 | 1.8.3-1+deb10u1 | 1 |
| assistiot/ | 0fce3ea719a5 | lz4 | 1.8.3-1+deb10u1 | 1 |
| assistiot/ | 792715dd3084 | lz4 | 1.8.3-1+deb10u1 | 1 |
| badsmoke/ | c54c004f24cc | lz4 | 1.8.3-1+deb10u1 | 1 |
| bastilimbach/ | 41b0835ab31e | lz4 | 1.8.3-1+deb10u1 | 1 |
| beastob/ | a90086a2c53e | lz4 | 1.8.3-1+deb10u1 | 1 |
| benbusby/ | f77f7e6e4ad2 | lz4 | 1.8.3-1+deb10u1 | 1 |
| beubi/ | a02c2e200920 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| bitnamilegacy/ | 50c5c23d5e8c | lz4 | 1.8.3-1+deb10u1 | 1 |
| bitnamilegacy/ | 3e51da56fc54 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| bitnamilegacy/ | e3c9d6b4bc92 | lz4 | 1.8.3-1+deb10u1 | 1 |
| bitnamilegacy/ | c3f10b41989f | lz4 | 1.8.3-1+deb10u1 | 1 |
| bivas/ | 05545994f806 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| brannondorsey/ | 7bd011904534 | lz4 | 1.8.3-1+deb10u1 | 1 |
| brannondorsey/ | 2f957f0839c2 | lz4 | 1.8.3-1+deb10u1 | 1 |
| bryanalves/ | 95f73dce8b21 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| bryanalves/ | af47dfbb9413 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| bsgrigorov/ | 45ab095f09c8 | lz4 | 0:1.8.3-3.el8_4 | 1 |
| camptocamp/ | 35c91d5fda04 | lz4 | 1.8.3-1+deb10u1 | 1 |
| camptocamp/ | bff736b15623 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| camptocamp/ | 78b77c838569 | lz4 | 1.8.3-1+deb10u1 | 1 |
| cdignam/ | 5a6a55b39cee | lz4 | 1.8.3-1+deb10u1 | 1 |
| ceticasbl/ | 6c0aa7567145 | lz4 | 1.8.3-1+deb10u1 | 1 |
| ceticasbl/ | bc34ce180d0c | lz4 | 1.8.3-1+deb10u1 | 1 |
| cfcontainerization/ | 82fa261c18a8 | lz4 | 1.9.3-2.1 | 1 |
| cfcontainerization/ | 58fb1c173a46 | lz4 | 1.9.3-2.1 | 1 |
| cfcontainerization/ | 7366b11c5fa5 | lz4 | 1.8.0-3.8.1 | 1 |
| cfcontainerization/ | 43131dbc0c8f | lz4 | 1.8.0-3.8.1 | 1 |
| chetangautamm/ | e7f7049e1544 | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| cheyang/ | 46cc34755493 | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| citizenstig/ | b81c818ccb86 | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| ckulka/ | aedb1f4f3fa0 | lz4 | 1.8.3-1+deb10u1 | 1 |
| cloudve/ | af56e77ca587 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |