CVE-2021-3520
CriticalAdvisory
Published 30 Apr 2021In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 753
- of 17,787 indexed, latest versions
- Container images
- 555
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: lz4 security update
Carried by container images the latest versions of 753 of 17,787 indexed charts deploy, on 555 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| lz4deb | 0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more | 0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more | 511 |
| lz4apk | 1.9.2-r0, 1.9.3-r0 | 1.9.2-r1, 1.9.3-r1 | 5 |
| lz4rpm | 1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el8 | 0:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.1 | 39 |
- OSV records
- ALPINE-CVE-2021-3520UBUNTU-CVE-2021-3520RHSA-2021:2575DLA-2657-1DSA-4919-1openSUSE-SU-2024:11562-1SUSE-SU-2021:1647-1
- Also known as
- USN-4968-1, USN-4968-2
Charts affected
753 by stars
Container images carrying it
555 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| lavandadelpatio/ | 94e225a5a6f8 | lz4 | 1.8.3-1+deb10u1 | 1 |
| lavandadelpatio/ | 92de3c3426d2 | lz4 | 1.8.3-1+deb10u1 | 1 |
| lavandadelpatio/ | 71f2ccec8c0d | lz4 | 1.8.3-1+deb10u1 | 1 |
| lavandadelpatio/ | f36af885e915 | lz4 | 1.8.3-1+deb10u1 | 1 |
| ldapaccountmanager/ | 95533a96a4c1 | lz4 | 1.8.3-1+deb10u1 | 1 |
| leeyoongti/ | 21d66cb76352 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 98531a31f213 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | cb079c0d7a57 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | ee75c9a737e7 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 41ed3a1a16b6 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 1fe4fb22a2a5 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 72b1b24a0288 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | d723943be12c | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 146c1fd999a6 | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| library/ | 6ca49afbcb2b | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| library/ | 691c55aabb3c | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 6d95fa56e008 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | e08834258fcc | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | e42a18d0bd0a | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 96104cb965fc | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 8e1095642250 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | b2d89d0a2103 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | d20aa6d1cae5 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | e90ac5331fe0 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | f7988fb6c02e | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 2f75145ad077 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 578ca5c8452c | lz4 | 1.9.3-r1 | 1 |
| library/ | 75ebf479151a | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | 9625c2fb3498 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | bb024e990f4f | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | d96835c90329 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 05bd722c6b0c | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | b6dd45cc35b3 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| library/ | 09c33840ec47 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 2e03fdd159f4 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 48c1431bed43 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 4be7fdb131e7 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | f29bcfb89167 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 0ae5169e3d0f | lz4 | 0.0~r131-2+deb9u1 | 1 |
| library/ | a246bc64207e | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 5b41623edd33 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 3882d9493d38 | lz4 | 1.8.3-1+deb10u1 | 1 |
| library/ | 4c8a6d3b2338 | lz4 | 1.8.3-1+deb10u1 | 1 |
| lightbend/ | b0c9894ac8dd | lz4 | 0.0~r131-2ubuntu2+esm1 | 1 |
| linuxserver/ | b801bbcf6386 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| linuxserver/ | 2fbb21fb4903 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| litmuschaos/ | 99961210d467 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| lmenezes/ | 6684131caf5f | lz4 | 0.0~r131-2+deb9u1 | 1 |
| lncm/ | bca14d04397d | lz4 | 1.8.3-1+deb10u1 | 1 |
| loicsharma/ | a880c78ae80b | lz4 | 1.8.3-1+deb10u1 | 1 |