An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openblas-RblasUpgrade openblas-openmpUpgrade openblas-threads64Upgrade openblas-openmp64_Upgrade openblas-openmp64Upgrade openblas-threadsUpgrade openblas-serial64Upgrade openblasUpgrade openblas-develUpgrade openblas-threads64_Upgrade openblas-staticUpgrade openblas-serial64_ | Nov 14, 2022 | Dec 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openblas-threadsUpgrade openblas-develUpgrade openblasUpgrade openblas-openmpUpgrade openblas-debuginfoUpgrade openblas-serial64Upgrade openblas-threads64_Upgrade openblas-staticUpgrade openblas-RblasUpgrade openblas-openmp64Upgrade openblas-serialUpgrade openblas-threads64Upgrade openblas-serial64_Upgrade openblas-openmp64_ | Jan 23, 2024 | Dec 8, 2021 |
| Centos_linux | — | Upgrade openblas-serial64-debuginfoUpgrade openblas-threads64_-debuginfoUpgrade openblas-openmp-debuginfoUpgrade openblas-serial64_-debuginfoUpgrade openblas-threadsUpgrade openblas-openmp64-debuginfoUpgrade openblas-debugsourceUpgrade openblas-Rblas-debuginfoUpgrade openblas-openmp64_-debuginfoUpgrade openblas-threads-debuginfoUpgrade openblas-debuginfoUpgrade openblas-threads64-debuginfoUpgrade openblas | Nov 9, 2022 | Dec 8, 2021 |
| Debian | — | Upgrade lapackUpgrade openblas | Jul 30, 2024 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openblas | Apr 20, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade blasUpgrade lapack | May 25, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade blasUpgrade lapack | Mar 2, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openblas | Mar 3, 2022 | Dec 8, 2021 |
| Oracle_linux | — | Upgrade openblas-serial64_Upgrade openblas-RblasUpgrade openblas-serial64Upgrade openblas-staticUpgrade openblas-develUpgrade openblas-openmp64_Upgrade openblas-openmp64Upgrade openblas-openmpUpgrade openblas | Nov 16, 2022 | Sep 30, 2021 |
| Redhat_linux | — | Upgrade openblas-Rblas-debuginfoUpgrade openblas-serial64_-debuginfoUpgrade openblas-serial64-debuginfoUpgrade openblas-openmpUpgrade openblasUpgrade openblas-debuginfoUpgrade openblas-serial64_Upgrade openblas-debugsourceUpgrade openblas-openmp64-debuginfoUpgrade openblas-RblasUpgrade openblas-threads-debuginfoUpgrade openblas-threadsNo solution existsUpgrade openblas-threads64_-debuginfoUpgrade openblas-threads64_Upgrade openblas-openmp-debuginfoUpgrade openblas-staticUpgrade openblas-develUpgrade openblas-threads64Upgrade openblas-openmp64Upgrade openblas-serial64Upgrade openblas-openmp64_-debuginfoUpgrade openblas-openmp64_Upgrade openblas-threads64-debuginfo | Nov 9, 2022 | Dec 8, 2021 |
| Rocky_linux | — | Upgrade openblas-RblasUpgrade openblasUpgrade openblas-threadsUpgrade openblas-Rblas-debuginfoUpgrade openblas-openmpUpgrade openblas-openmp64-debuginfoUpgrade openblas-debuginfoUpgrade openblas-serial64_-debuginfoUpgrade openblas-serial64-debuginfoUpgrade openblas-debugsourceUpgrade openblas-threads-debuginfoUpgrade openblas-threads64_Upgrade openblas-staticUpgrade openblas-serial64_Upgrade openblas-threads64_-debuginfoUpgrade openblas-threads64-debuginfoUpgrade openblas-develUpgrade openblas-openmp64Upgrade openblas-openmp-debuginfoUpgrade openblas-serial64Upgrade openblas-openmp64_-debuginfoUpgrade openblas-threads64Upgrade openblas-openmp64_ | Mar 12, 2024 | Dec 8, 2021 |
| Suse | — | Upgrade liblapacke3Upgrade blas-devel-staticUpgrade libopenblas_pthreads-develUpgrade lapack-develUpgrade openblas-common-develUpgrade lapacke-devel-32bitUpgrade lapacke-develUpgrade cblas-develUpgrade libcblas3Upgrade liblapack3Upgrade blas-develUpgrade lapacke-devel-staticUpgrade libblas3-32bitUpgrade libopenblas_openmp0Upgrade liblapack3-32bitUpgrade lapack-manUpgrade blas-manUpgrade lapack-devel-staticUpgrade liblapacke3-32bitUpgrade libopenblas_openmp-develUpgrade blas-devel-32bitUpgrade libopenblas_pthreads0Upgrade libblas3Upgrade lapack-devel-32bit | Mar 22, 2022 | Dec 8, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub