Vulnerability in lz4 package: Out-of-Bound Read in LZ4_decompress_safe_partial
Summary
GSD-2022-1001973: lz4: fix LZ4_decompress_safe_partial read out of bound. Affects Kernel versions < 6adc01a7aa37445dafe8846faa0610a86029b253. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The lz4 package is a compression library that provides fast compression and decompression algorithms. It is commonly used in various applications and systems to reduce the size of data for storage or transmission purposes. However, a vulnerability has been discovered in the LZ4_decompress_safe_partial function, which can lead to out-of-bound read access. This vulnerability can potentially be exploited by an attacker to leak sensitive information or cause a denial-of-service condition.
Vulnerability Detail
The vulnerability in the lz4 package arises from a flaw in the LZ4_decompress_safe_partial function. When decompressing a compressed data stream, the function fails to properly validate the input, leading to an out-of-bound read access. An attacker can craft a malicious compressed data stream that triggers this vulnerability, potentially resulting in the disclosure of sensitive information or causing the application to crash. The impact and attack plausibility of this vulnerability have not yet been proven, but it is important to address it to ensure the security and stability of systems using the lz4 package.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the latest version of the lz4 package, applying the update is the recommended solution. However, if updating is not immediately feasible, a possible workaround is to disable or restrict the usage of the affected functionality in the application or system. This can be achieved by modifying the code or configuration to avoid invoking the vulnerable LZ4_decompress_safe_partial function. It is important to note that workarounds may not provide complete protection and should only be considered as temporary measures until the package can be updated.
Conclusion
In conclusion, the lz4 package is vulnerable to an out-of-bound read issue in the LZ4_decompress_safe_partial function. This vulnerability can potentially be exploited to leak sensitive information or cause a denial-of-service condition. It is crucial to update the package to the latest version, which includes the fix for this vulnerability. If immediate updating is not possible, applying workarounds and following best practices can help mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The lz4 package is a compression library that provides fast compression and decompression algorithms. It is commonly used in various applications and systems to reduce the size of data for storage or transmission purposes.
This vulnerability can potentially be exploited by an attacker to leak sensitive information or cause a denial-of-service condition. However, the actual impact and attack plausibility have not yet been proven.
Yes, this vulnerability has been fixed in Linux Kernel version v5.10.111 by commit 6adc01a7aa37445dafe8846faa0610a86029b253.
To update the lz4 package, it is recommended to follow the official documentation or guidelines provided by the package maintainers. They will provide instructions on how to update the package to the latest version.
If updating the package is not immediately feasible, a possible workaround is to disable or restrict the usage of the affected functionality in the application or system. However, workarounds may not provide complete protection and should only be considered as temporary measures.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
