An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openblas-serial64_Upgrade openblas-develUpgrade openblas-staticUpgrade openblasUpgrade openblas-threads64_Upgrade openblas-serial64Upgrade openblas-RblasUpgrade openblas-threads64Upgrade openblas-openmp64Upgrade openblas-openmp64_Upgrade openblas-openmpUpgrade openblas-threads | Nov 14, 2022 | Dec 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openblas-openmpUpgrade openblas-debuginfoUpgrade openblasUpgrade openblas-develUpgrade openblas-threadsUpgrade openblas-serial64Upgrade openblas-RblasUpgrade openblas-staticUpgrade openblas-threads64Upgrade openblas-openmp64Upgrade openblas-serial64_Upgrade openblas-openmp64_Upgrade openblas-serialUpgrade openblas-threads64_ | Jan 23, 2024 | Dec 8, 2021 |
| Centos_linux | — | Upgrade openblas-threads-debuginfoUpgrade openblas-threads64-debuginfoUpgrade openblasUpgrade openblas-openmp64_-debuginfoUpgrade openblas-debuginfoUpgrade openblas-Rblas-debuginfoUpgrade openblas-debugsourceUpgrade openblas-openmp-debuginfoUpgrade openblas-threads64_-debuginfoUpgrade openblas-openmp64-debuginfoUpgrade openblas-threadsUpgrade openblas-serial64-debuginfoUpgrade openblas-serial64_-debuginfo | Nov 9, 2022 | Dec 8, 2021 |
| Debian | — | Upgrade openblasUpgrade lapack | Jul 30, 2024 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openblas | Apr 20, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lapackUpgrade blas | May 25, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lapackUpgrade blas | Mar 2, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openblas | Mar 3, 2022 | Dec 8, 2021 |
| Oracle_linux | — | Upgrade openblas-openmpUpgrade openblasUpgrade openblas-serial64Upgrade openblas-develUpgrade openblas-openmp64_Upgrade openblas-RblasUpgrade openblas-openmp64Upgrade openblas-serial64_Upgrade openblas-static | Nov 16, 2022 | Sep 30, 2021 |
| Redhat_linux | — | Upgrade openblas-develUpgrade openblas-openmp64_-debuginfoUpgrade openblas-threads64-debuginfoUpgrade openblas-threads64Upgrade openblas-openmp64_Upgrade openblas-staticUpgrade openblas-openmp-debuginfoUpgrade openblas-openmp64Upgrade openblas-serial64Upgrade openblas-threads64_Upgrade openblas-debuginfoUpgrade openblas-serial64_Upgrade openblas-openmp64-debuginfoUpgrade openblasUpgrade openblas-threads64_-debuginfoNo solution existsUpgrade openblas-threadsUpgrade openblas-threads-debuginfoUpgrade openblas-debugsourceUpgrade openblas-Rblas-debuginfoUpgrade openblas-RblasUpgrade openblas-openmpUpgrade openblas-serial64-debuginfoUpgrade openblas-serial64_-debuginfo | Nov 9, 2022 | Dec 8, 2021 |
| Rocky_linux | — | Upgrade openblas-debuginfoUpgrade openblas-serial64-debuginfoUpgrade openblas-debugsourceUpgrade openblas-Rblas-debuginfoUpgrade openblas-threads-debuginfoUpgrade openblas-openmp64-debuginfoUpgrade openblas-serial64_-debuginfoUpgrade openblas-openmpUpgrade openblas-RblasUpgrade openblasUpgrade openblas-threadsUpgrade openblas-threads64_-debuginfoUpgrade openblas-threads64-debuginfoUpgrade openblas-openmp-debuginfoUpgrade openblas-openmp64Upgrade openblas-serial64_Upgrade openblas-threads64_Upgrade openblas-openmp64_-debuginfoUpgrade openblas-serial64Upgrade openblas-threads64Upgrade openblas-openmp64_Upgrade openblas-staticUpgrade openblas-devel | Mar 12, 2024 | Dec 8, 2021 |
| Suse | — | Upgrade libblas3Upgrade liblapack3-32bitUpgrade blas-devel-32bitUpgrade lapack-devel-32bitUpgrade lapack-manUpgrade libblas3-32bitUpgrade blas-manUpgrade liblapack3Upgrade lapacke-develUpgrade libopenblas_pthreads0Upgrade blas-develUpgrade liblapacke3-32bitUpgrade cblas-develUpgrade lapack-devel-staticUpgrade libcblas3Upgrade lapacke-devel-staticUpgrade libopenblas_openmp-develUpgrade libopenblas_openmp0Upgrade openblas-common-develUpgrade blas-devel-staticUpgrade lapacke-devel-32bitUpgrade liblapacke3Upgrade lapack-develUpgrade libopenblas_pthreads-devel | Mar 22, 2022 | Dec 8, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub