PatchTheCVElizard vulnerabilities and fixes
Recent CVEs affecting lizard, with upgrade or downgrade steps. 2 tracked.
lizard has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-09-13. Highest priority: CVE-2018-16985 (score 55/100).
- CVE-2018-16985 HIGH 7.5 DOWNGRADE In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_
- CVE-2018-11498 HIGH 7.8 DOWNGRADE DOWNGRADE In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer
FAQ
How do I fix lizard vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lizard being exploited right now?
None of the tracked lizard CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lizard CVE should I patch first?
CVE-2018-16985 currently ranks highest (55/100): In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_.