CVE catalog

CVE-2021-3465

UBUNTU-CVE-2021-3465

[CVE catalog]

Severity
Medium · CVSS 4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Updated
Source
[NVD] · [CVE record]

This update for p7zip fixes the following issues: - CVE-2021-3465: Fixed a NULL pointer dereference in NCompress:CCopyCoder:Code (bsc#1184699)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susep7ziplinux enterprise module for basesystem 15 sp216.02-14.5.1fixed
Susep7ziplinux enterprise module for basesystem 15 sp316.02-14.5.1fixed
Opensusep7zipleap 15.216.02-lp152.8.3.1fixed
Ubuntup7zip14.049.20.1~dfsg.1-4vulnerable
Ubuntup7zip14.049.20.1~dfsg.1-4+deb7u1build0.14.04.1vulnerable
Ubuntup7zip14.049.20.1~dfsg.1-4+deb7u2build0.14.04.1vulnerable
Ubuntup7zip14.049.20.1~dfsg.1-4+deb7u3build0.14.04.1vulnerable
Ubuntup7zip16.049.20.1~dfsg.1-4.2vulnerable
Ubuntup7zip16.049.20.1~dfsg.1-4.2ubuntu0.1vulnerable
Ubuntup7zip18.0416.02+dfsg-4vulnerable
Ubuntup7zip18.0416.02+dfsg-5vulnerable
Ubuntup7zip18.0416.02+dfsg-6vulnerable
Ubuntup7zip20.0416.02+dfsg-7vulnerable
Ubuntup7zip20.0416.02+dfsg-7build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susep7ziprpmlinux enterprise module for basesystem 15 sp216.02-14.5.1Not reportedSUSE-SU-2021:1491-1Not reported
Susep7ziprpmlinux enterprise module for basesystem 15 sp316.02-14.5.1Not reportedSUSE-SU-2021:1491-1Not reported
Opensusep7ziprpmleap 15.216.02-lp152.8.3.1Not reportedOPENSUSE-SU-2021:0684-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[OSV Package Vulnerability Database] · [SUSE security advisories and VEX]