CVE:CVE-2021-3520
CNNVD:CNNVD-202104-2105
LZ4是一款无损压缩算法。
LZ4 1:1.9.3-1 存在输入验证错误漏洞，该漏洞源于整数溢出bug导致一个memmove参数变为负数而导致的潜在内存损坏。
solution:Upgrade lz4_project lz4 to a higher version than 1.8.3,and avoid the version 1.8.3; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8