An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-openblasalma-upgrade-openblas-develalma-upgrade-openblas-openmpalma-upgrade-openblas-openmp64alma-upgrade-openblas-openmp64_alma-upgrade-openblas-rblasalma-upgrade-openblas-serial64alma-upgrade-openblas-serial64_alma-upgrade-openblas-staticalma-upgrade-openblas-threadsalma-upgrade-openblas-threads64alma-upgrade-openblas-threads64_ | Nov 14, 2022 | Dec 8, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-openblasamazon-linux-ami-2-upgrade-openblas-debuginfoamazon-linux-ami-2-upgrade-openblas-develamazon-linux-ami-2-upgrade-openblas-openmpamazon-linux-ami-2-upgrade-openblas-openmp64amazon-linux-ami-2-upgrade-openblas-openmp64_amazon-linux-ami-2-upgrade-openblas-rblasamazon-linux-ami-2-upgrade-openblas-serialamazon-linux-ami-2-upgrade-openblas-serial64amazon-linux-ami-2-upgrade-openblas-serial64_amazon-linux-ami-2-upgrade-openblas-staticamazon-linux-ami-2-upgrade-openblas-threadsamazon-linux-ami-2-upgrade-openblas-threads64amazon-linux-ami-2-upgrade-openblas-threads64_ | Jan 23, 2024 | Dec 8, 2021 | |
| Centos_linux | — | centos-upgrade-openblascentos-upgrade-openblas-debuginfocentos-upgrade-openblas-debugsourcecentos-upgrade-openblas-openmp-debuginfocentos-upgrade-openblas-openmp64-debuginfocentos-upgrade-openblas-openmp64_-debuginfocentos-upgrade-openblas-rblas-debuginfocentos-upgrade-openblas-serial64-debuginfocentos-upgrade-openblas-serial64_-debuginfocentos-upgrade-openblas-threadscentos-upgrade-openblas-threads-debuginfocentos-upgrade-openblas-threads64-debuginfocentos-upgrade-openblas-threads64_-debuginfo | Nov 9, 2022 | Dec 8, 2021 |
| Debian | debian-upgrade-lapackdebian-upgrade-openblas | Jul 30, 2024 | Dec 8, 2021 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-openblas | Apr 20, 2022 | Dec 8, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-blashuawei-euleros-2_0_sp3-upgrade-lapack | May 25, 2022 | Dec 8, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-blashuawei-euleros-2_0_sp5-upgrade-lapack | Mar 2, 2022 | Dec 8, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-openblas | Mar 3, 2022 | Dec 8, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-openblasoracle-linux-upgrade-openblas-develoracle-linux-upgrade-openblas-openmporacle-linux-upgrade-openblas-openmp64oracle-linux-upgrade-openblas-rblasoracle-linux-upgrade-openblas-serial64oracle-linux-upgrade-openblas-staticoracle-linux-upgrade-openblas-threadsoracle-linux-upgrade-openblas-threads64 | Nov 16, 2022 | Sep 30, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-openblasredhat-upgrade-openblas-debuginforedhat-upgrade-openblas-debugsourceredhat-upgrade-openblas-develredhat-upgrade-openblas-openmpredhat-upgrade-openblas-openmp-debuginforedhat-upgrade-openblas-openmp64redhat-upgrade-openblas-openmp64-debuginforedhat-upgrade-openblas-openmp64_redhat-upgrade-openblas-openmp64_-debuginforedhat-upgrade-openblas-rblasredhat-upgrade-openblas-rblas-debuginforedhat-upgrade-openblas-serial64redhat-upgrade-openblas-serial64-debuginforedhat-upgrade-openblas-serial64_redhat-upgrade-openblas-serial64_-debuginforedhat-upgrade-openblas-staticredhat-upgrade-openblas-threadsredhat-upgrade-openblas-threads-debuginforedhat-upgrade-openblas-threads64redhat-upgrade-openblas-threads64-debuginforedhat-upgrade-openblas-threads64_redhat-upgrade-openblas-threads64_-debuginfo | Nov 9, 2022 | Dec 8, 2021 | |
| Rocky_linux | rocky-upgrade-openblasrocky-upgrade-openblas-debuginforocky-upgrade-openblas-debugsourcerocky-upgrade-openblas-develrocky-upgrade-openblas-openmprocky-upgrade-openblas-openmp-debuginforocky-upgrade-openblas-openmp64rocky-upgrade-openblas-openmp64-debuginforocky-upgrade-openblas-openmp64_rocky-upgrade-openblas-openmp64_-debuginforocky-upgrade-openblas-rblasrocky-upgrade-openblas-rblas-debuginforocky-upgrade-openblas-serial64rocky-upgrade-openblas-serial64-debuginforocky-upgrade-openblas-serial64_rocky-upgrade-openblas-serial64_-debuginforocky-upgrade-openblas-staticrocky-upgrade-openblas-threadsrocky-upgrade-openblas-threads-debuginforocky-upgrade-openblas-threads64rocky-upgrade-openblas-threads64-debuginforocky-upgrade-openblas-threads64_rocky-upgrade-openblas-threads64_-debuginfo | Mar 12, 2024 | Dec 8, 2021 | |
| Suse | — | suse-upgrade-blas-develsuse-upgrade-blas-devel-32bitsuse-upgrade-blas-devel-staticsuse-upgrade-blas-mansuse-upgrade-cblas-develsuse-upgrade-lapack-develsuse-upgrade-lapack-devel-32bitsuse-upgrade-lapack-devel-staticsuse-upgrade-lapack-mansuse-upgrade-lapacke-develsuse-upgrade-lapacke-devel-32bitsuse-upgrade-lapacke-devel-staticsuse-upgrade-libblas3suse-upgrade-libblas3-32bitsuse-upgrade-libcblas3suse-upgrade-liblapack3suse-upgrade-liblapack3-32bitsuse-upgrade-liblapacke3suse-upgrade-liblapacke3-32bitsuse-upgrade-libopenblas_openmp-develsuse-upgrade-libopenblas_openmp0suse-upgrade-libopenblas_pthreads-develsuse-upgrade-libopenblas_pthreads0suse-upgrade-openblas-common-devel | Mar 22, 2022 | Dec 8, 2021 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Dec 8, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub