CVE-2021-3520

Critical

Advisory

Published 30 Apr 2021In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.032; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 751; of 17,781 indexed, latest versions
Container images: 553; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: lz4 security update

Carried by container images the latest versions of 751 of 17,781 indexed charts deploy, on 553 images.

Affected package	Affected versions	Fixed in	Images
lz4deb	0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more	0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more	509
lz4apk	1.9.2-r0, 1.9.3-r0	1.9.2-r1, 1.9.3-r1	5
lz4rpm	1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el8	0:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.1	39

OSV records: ALPINE-CVE-2021-3520 UBUNTU-CVE-2021-3520 RHSA-2021:2575 DLA-2657-1 DSA-4919-1 openSUSE-SU-2024:11562-1 SUSE-SU-2021:1647-1
Also known as: USN-4968-1, USN-4968-2

Charts affected

751 by stars

Chart

Latest

Affected images

Radar Score

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	lz4@1.8.3-1	1.8.3-1+deb10u1

Open the chart page →

1,138

Container images carrying it

553 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :1.16.0	3e373fd5b8d4	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	86
dellcloud/pages :monitor	6ba7b22caacd	lz4@1.9.2-2	1.9.2-2ubuntu0.20.04.1	79
flyway/flyway :6.4.4	22d97ceb0c47	lz4@0.0~r131-2ubuntu3	0.0~r131-2ubuntu3.1	79
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	lz4@1.8.3-1	1.8.3-1+deb10u1	33
oomk8s/readiness-check :2.0.2	875814cc853d	lz4@0.0~r131-2ubuntu2	0.0~r131-2ubuntu2+esm1	11
gradiant/hdfs :2.7.7	3b28784ba41f	lz4@1.8.3-1	1.8.3-1+deb10u1	7
library/cassandra :3.11.3	ce85468c5bad	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	7
osixia/openldap :1.5.0	18742e9c449c	lz4@1.8.3-1	1.8.3-1+deb10u1	7
library/zookeeper :3.5.5	b7a76ec06f68	lz4@1.8.3-1	1.8.3-1+deb10u1	6
oomk8s/readiness-check :2.0.0	7daa08b81954	lz4@0.0~r131-2ubuntu2	0.0~r131-2ubuntu2+esm1	6
library/mysql :8.0.22	0fd2898dc1c9	lz4@1.8.3-1	1.8.3-1+deb10u1	5
library/nginx :1.19	df13abe416e3	lz4@1.8.3-1	1.8.3-1+deb10u1	5
osixia/phpldapadmin :0.9.0	d112b82be133	lz4@1.8.3-1	1.8.3-1+deb10u1	5
ghcr.io/stacksimplify/kubenginx :0.1.0 :1.0.0	205961b09a80	lz4@1.8.3-1	1.8.3-1+deb10u1	5
grafana/grafana :6.2.5	ab415470454b	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	4
hyperledger/fabric-ca :1.4.9	28f50c6aa4f4	lz4@1.8.3-1	1.8.3-1+deb10u1	4
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	lz4@0.0~r131-2ubuntu2	0.0~r131-2ubuntu2+esm1	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	lz4@0.0~r131-2ubuntu2	0.0~r131-2ubuntu2+esm1	4
kodekloud/examplevotingapp_worker :v1	741e3aaaa812	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	4
library/memcached :1.5.20	2f561d372672	lz4@1.8.3-1	1.8.3-1+deb10u1	4
library/mongo :4.2.12-bionic	628741415fc9	lz4@0.0~r131-2ubuntu3	0.0~r131-2ubuntu3.1	4
library/redis :5.0.1	19f4621c085c	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	4
oscarsotosanchez/server :v1.0	6e2e1279126b	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	lz4@0.0~r131-2ubuntu3	0.0~r131-2ubuntu3.1	4
osixia/phpldapadmin :0.7.1	1ab629698ae0	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	4
argoproj/argocd :v1.8.1	830e86cacefd	lz4@1.8.3-1	1.8.3-1+deb10u1	3
conduction/openwebconcept :4.8	ee2121b569ac	lz4@1.8.3-1	1.8.3-1+deb10u1	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	lz4@1.9.2-2	1.9.2-2ubuntu0.20.04.1	3
frankescobar/allure-docker-service-ui :7.0.3 :latest	4ebd8b4ef340	lz4@1.8.3-1	1.8.3-1+deb10u1	3
library/mysql :8.0.18	e1b0fd480a11	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	3
library/redis :5.0.4	2dfa64327446	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	3
lmenezes/cerebro :0.9.4	7d9e2b77e459	lz4@1.8.3-1	1.8.3-1+deb10u1	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	lz4@1.8.3-2.el8	0:1.8.3-3.el8_4	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	lz4@0.0~r131-2ubuntu2	0.0~r131-2ubuntu2+esm1	3
selenium/hub :3.141.59	02f251d48d5f	lz4@1.9.2-2	1.9.2-2ubuntu0.20.04.1	3
xenondb/percona :5.7.33	0e26872a2b67	lz4@1.9.2-2	1.9.2-2ubuntu0.20.04.1	3
ghcr.io/stacksimplify/kubenginx :0.4.0 :4.0.0	279eb855e6c7	lz4@1.8.3-1	1.8.3-1+deb10u1	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	lz4@0.0~r131-2ubuntu2	0.0~r131-2ubuntu2+esm1	3
quay.io/devtron/postgres :11.3	ef035ac10498	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	3
amancevice/superset :0.35.2	12a0a9e66550	lz4@1.8.3-1	1.8.3-1+deb10u1	2
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	lz4@1.8.3-1	1.8.3-1+deb10u1	2
fjvela/urjc-fjvela-external-service :1.0.1	a8ebe5ca13fc	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	2
fjvela/urjc-fjvela-server :1.0.5	3c840aebce22	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	lz4@0.0~r131-2ubuntu3	0.0~r131-2ubuntu3.1	2
grafana/grafana :6.1.6	d66b41cf7e05	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	2
grafana/promtail :1.5.0	46e88d390cd6	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	2
hjacobs/kube-ops-view :20.4.0	58221b57d4d2	lz4@1.8.3-1	1.8.3-1+deb10u1	2
istio/examples-bookinfo-details-v1 :1.14.0	4c3379923c8a	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	2
istio/examples-bookinfo-details-v1 :1.15.0	fce0bcbff0be	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	2
istio/examples-bookinfo-productpage-v1 :1.15.0	0a5eb4795952	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1	2